Information Technology Security Evaluation Criteria (ITSEC) - a Contribution to Vulnerability?