>Of the 144 Xen hypervisor vulnerabilities in the report, Nexen can defend against 96 of them on the Intel x86 platform, and if an equivalent implementation was

>Of the 144 Xen hypervisor vulnerabilities in the report, Nexen can defend against 96 of them on the Intel x86 platform, and if an equivalent implementation was created for ARM and AMD processors, the architecture would also defend against a further 17 vulnerabilities specific to those processor types. In total, Nexen prevents 107 out of the 144 vulnerabilities. I've never quite understood papers that quantify things in this manner. Presumably, the Xen hypervisor can now defend against 144 of the 144 vulnerabilities listed. I understand that the point of Nexen is to eliminate classes of vulnerabilities, but this paragraph does a very poor job of conveying it. Why is it not "Nexen is defended against X, Y, and Z classes of vulnerabilities as a product of it's design, of which 107 of the 144 Xen vulnerabilities are, blah blah blah"? If it's not a product of the design, then it's pretty meaningless - cool, a reimplementation of Xen that came after all of these vulnerabilities is defended against a lot of them. So what?