a metadata structure to support other software security assurance-related
activities, including software security metrics and measurement, software
security tool evaluations and surveys, and methodologies for validating the
product claims of software security tool vendors.