work is more detailed in this respect.
The work from Jeannette Wing et al on measuring attack surface introduces some
concepts that overlap vulnerability theory, but it is largely for data-driven attack vectors
and is focused on quantitative measurements of design quality.