Built in order to quantify the security of a given Information System