Vulnerability analysis For evaluating quality of protection of security policies