u Pinpoint the software-specific vulnerabilities in larger security
vulnerabilities lists
u Correlate, rationalize, and fuse the different names, definitions, and
classifications assigned to the same vulnerabilities.