Risk Reduction Estimation -- Assessing the risk of using vulnerable components --