calculated when the IPS is not present.
u Static Analysis Tool Effectiveness Metric—[124] Devised by KatrinaTsipenyuk
and Brian Chess of Fortify Software, this metric combines the actual
number of flaws (true positive rate) with the tool’s false positive and false