software vulnerability mitigation