organizations are becoming more aware of the additional costs associated with
insecure software: according to Mark Graff and Ken van Wyk, [84] the cost of
lost time and resources to maintain a vulnerable software component can be
as much as three times the initial purchase of secure software. In response,