DEGREES OF CONTROL: how much control an actor has over a resource; this is frequently
described in terms of attacker control over data, directives, and consequences. An actor might
have Full, Partial, or No control over a resource - and this could change over time.
PRINCIPLES: everyone's definition of "vulnerability" differs, but it could be defined in terms of