vulnerability. Unlike the dimensions that are inherent to the issue, which can be
quantified in a repeatable fashion, the level of effort would vary widely depending on the
individual researcher’s skills and the capabilities of the tools being used. Tool
performance is not quantitatively comparable yet, although the [SAMATE] and [CWE]