Bad Security Metrics Part 1: Problems

Flater, David

doi:https://doi.org/10.1109/MITP.2018.011301733

July 19, 2023: URLs for CSRC publication details pages have changed. Legacy URLs should automatically redirect to the new URLs. However, links to the actual publications have NOT changed (e.g., DOIs and PDFs on nvlpubs.nist.gov). Please send inquiries to csrc-inquiry@nist.gov.

Journal Article

Bad Security Metrics Part 1: Problems

Documentation Topics

Published: February 14, 2018
Citation: IT Professional vol. 20, no. 1, (January-February 2018) pp. 64-68

Author(s)

David Flater (NIST)

Abstract

This two-part series focuses on defining the problem of questionable metrics conceptually and revealing a path forward for improving both security metrics and how people use them.

Keywords

security; measurement; metrics; scale theory

Control Families

None selected

Documentation

Publication:
https://doi.org/10.1109/MITP.2018.011301733

Supplemental Material:
Preprint (pdf)

Related NIST Publications:
Journal Article

Document History:
02/14/18: Journal Article (Final)

Topics

Security and Privacy

security measurement