some existing vulnerabilities. For example, if it is not known how
the vulnerability entered the system, it cannot be classified by
genesis at all.
Another scheme relevant to our discussion is ODC (Orthogonal