pretend they can define measurements of absolute security. The best they can
hope for is to measure different characteristics and properties of software that
can be interpreted in aggregate as indicating the relative security of that software,
when compared either with itself operating under different conditions, or with