CPE and CVE based Technique for Software Security Risk Assessment | IEEE Conference Publication | IEEE Xplore