S-vector metric will be used rate a web application’s implementation
against its requirements for: (1) technical capabilities (i.e., security
functions), (2) structural protection (i.e., security properties), and
(3) procedural methods (i.e., processes used in developing, validating,