which are features of the targeted system that positively or negatively affect its
security. Each root attack vector has an associated attack bias value between 0
and 1, indicating the level ofrisk that a compromise will be achieved by the attack
vector, and an effective attack surface, indicating the number of attack surfaces