vulnerability avoidance