Category risk based vulnerability management rbvm approach