between automated tools. Finally, OVAL differs from AVDL in a third significant
way: it specifies a baseline vulnerability assessment methodology that must
be implemented by all OVAL-compliant vulnerability assessment tools and
vulnerability scanners (and which may also be used manually). This three-step