Bad Security Metrics Part 2: Solutions

Flater, David

doi:https://doi.org/10.1109/MITP.2018.021921653

July 19, 2023: URLs for CSRC publication details pages have changed. Legacy URLs should automatically redirect to the new URLs. However, links to the actual publications have NOT changed (e.g., DOIs and PDFs on nvlpubs.nist.gov). Please send inquiries to csrc-inquiry@nist.gov.

Journal Article

Bad Security Metrics Part 2: Solutions

Documentation Topics

Published: April 16, 2018
Citation: IT Professional vol. 20, no. 2, (March-April 2018) pp. 76-79

Author(s)

David Flater (NIST)

Abstract

This two-part series focuses on defining the problem of questionable metrics conceptually and revealing a path forward for improving both security metrics and how people use them.

Keywords

security; measurement; metrics; scale theory

Control Families

None selected

Documentation

Publication:
https://doi.org/10.1109/MITP.2018.021921653

Supplemental Material:
Preprint (pdf)

Related NIST Publications:
Journal Article

Document History:
04/16/18: Journal Article (Final)

Topics

Security and Privacy

security measurement