“attackability” of a system, i.e., the likelihood that an attack on the system will occur
and be successful. A RASQ score is calculated by finding the root attack vectors,
Software Security Assurance State-of-the-Art Report (SOAR) 109
Section 5 SDLC Processes and Methods and the Security of Software