periodic vulnerability checking strategy