software security risk management:
1. Risk Assessment—Determination of the extent of vulnerabilities;
estimation of the probability of losses caused by exploits; includes
intrusion detection/prevention, risk/attack assessment of networkfacing systems, and cost-benefit analysis of countermeasures