Directions in Security Metrics Research

Jansen, Wayne

doi:https://doi.org/10.6028/NIST.IR.7564

July 19, 2023: URLs for CSRC publication details pages have changed. Legacy URLs should automatically redirect to the new URLs. However, links to the actual publications have NOT changed (e.g., DOIs and PDFs on nvlpubs.nist.gov). Please send inquiries to csrc-inquiry@nist.gov. [12:20 pm ET - If you received "Page Not Found" errors recently, please retry accessing those files. File synchronization should now be complete.]

NIST IR 7564

Directions in Security Metrics Research

Documentation Topics

Date Published: April 2009

Author(s)

Wayne Jansen (NIST)

Abstract

More than 100 years ago, Lord Kelvin insightfully observed that measurement is vital to deep knowledge and understanding in physical science. During the last few decades, researchers have made various attempts to develop measures and systems of measurement for computer security with varying degrees of success. This paper provides an overview of the security metrics area and looks at possible avenues of research that could be pursued to advance the state of the art.

Keywords

computer security; security evaluation; security metrics

Control Families

Risk Assessment

Documentation

Publication:
https://doi.org/10.6028/NIST.IR.7564
Download URL

Supplemental Material:
None available

Document History:
04/30/09: IR 7564 (Final)

Topics

Security and Privacy

general security & privacy, risk assessment