期刊名称:International Journal of Enterprise Computing and Business Systems
电子版ISSN:2230-8849
出版年度:2011
卷号:1
期号:2
出版社:International Journal of Enterprise Computing and Business Systems
摘要:This paper covers the basic aspects of security metrics. It provides a definition of security metrics explains their value, discusses various aspects or issues in developing the security metrics and design considerations for information security measurement systems. More than 100 years ago, Lord Kelvin insightfully observed that measurement is vital to deep knowledge and understanding in physical science. During the last few decades, researchers have made various attempts to develop measures and systems of measurement for computer security with varying degrees of success. This paper provides an overview of the security metrics area and looks at possible avenues of measuring the security metrics.