41 “OVAL: Open Vulnerability Assessment Language” [website] (Bedford MA: The MITRE Corporation).
Software Security Assurance State-of-the-Art Report (SOAR) 57
Section 3 Why is Software at Risk?
42 “VEDEF: Vulnerability and Exploit Description and Exchange Format” [website] (Amsterdam, The