(VAAL) as a useful way of communicating the extent to which a security analysis has
been performed on a product [Litchfield2006]. It could also be useful as a guideline for
conducting repeatable analyses of various depths. If fully developed and adopted, VAAL
could be a boon to consumers, who generally do not have the skills or resources for