Some Guidelines for Risk Assessment of Vulnerability Discovery Processes