The biggest disadvantage of this scheme is inability to classify
some existing vulnerabilities. For example, if it is not known how
the vulnerability entered the system, it cannot be classified by
genesis at all.