Software Security Impact Analysis