 These are conventionally referred to as the "modified duration" and "convexity" of the security, and are often called risk numbers.The data requirements for this approach to attribution are less onerous than for the first-principle approach.The perturbation equation does require externally calculated risk numbers, but this may not be a major obstacle, since these quantities are readily available from the same sources as yields and prices.