Vulnerability model