Focusing on real attack vectors missed by traditional vulnerability management