Privilege Metric for Evaluating the Security of a Library

A privilege metric application quantifies a privilege reduction for a subject software module MS. Target critical resources Mt accessible by the subject module are identified. Permissions P(MS, Mt) for the subject module to access each of the target critical resources as a result of the privilege reduction are determined. Default library permissions Pbase(MS, Mt) without the privilege reduction are determined. A metric regarding the vulnerability reduction of P(MS, Mt) with respect to Pbase(MS, Mt) is quantified.