Bringing law to the security jungle

A new consistent set of security ratings could help users cut through jargon and work out which patches they actually need to apply.