behaviors B1 and B2, with manipulations M1...M5 on resource R. These manipulations preserve
property P and modify property Q. What types of vulnerabilities or attacks involve P and Q, and
therefore might be able to affect X?
2) Evaluating vulnerability "difficulty"