attackability rating (based on the number of vulnerabilities found inWindows
2000 Server since its release). By contrast, the RASQ forWindows Server 2003
running IIS was significantly lower—156.60, providing evidence that Microsoft has
addressed many of the security shortfalls in the earlierWindows Server version.