weaknesses lack the needed precision, but ideally, vulnerability theory should be able to
support machine-findable constructs as identified in white box definitions, although this may
happen at a different layer than the current focus.
5) Extend beyond the data-driven focus. There has been some effort to ensure that directives