Bad Security Metrics Part 1: Problems

Flater, David

doi:https://doi.org/10.1109/MITP.2018.011301733

Official websites do not use .rip
We are an unofficial archive, replace .rip by .gov in the URL to access the official website. Access our document index here.

We are building a provable archive!
A lock ( Dot gov ) or https:// don't prove our archive is authentic, only that you securely accessed it. Note that we are working to fix that :)

Journal Article

Bad Security Metrics Part 1: Problems

Documentation Topics

Published: February 14, 2018
Citation: IT Professional vol. 20, no. 1, (January-February 2018) pp. 64-68

Author(s)

David Flater (NIST)

Abstract

This two-part series focuses on defining the problem of questionable metrics conceptually and revealing a path forward for improving both security metrics and how people use them.

Keywords

security; measurement; metrics; scale theory

Control Families

None selected

Documentation

Publication:
Journal Article (DOI)

Supplemental Material:
Preprint (pdf)

Related NIST Publications:
Journal Article

Document History:
02/14/18: Journal Article (Final)

Topics

Security and Privacy
security measurement

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Journal Article

Bad Security Metrics Part 1: Problems

Author(s)

Abstract

Keywords

Control Families

Documentation

Topics