Measuring the Effectiveness of Your Vulnerability Discovery Strategies