u The impact (in terms of extent and intensity of damage) of malicious
code that is present in software in deployment.
This guidance is intended, at a minimum, to make an adversary work harder
and take more risks to mount a successful malicious code attack. Malicious