Refactoring on the vulnerability process