Vulnerability index method