Attacker utility represents what an operator or penetration tester can practically accomplish by exploiting a software flaw