vulnerability reduction