1. A computer readable medium including executable instructions to analyze program instructions for security vulnerabilities, comprising executable instructions to: convert diverse program instruction formats to a common format; derive a system model from said common format; perform a static analysis on said system model to identify security vulnerabilities; and report said security vulnerabilities.