Visible to the public An Approach to Software Vulnerability Analysis (SVA)