Towards a taxonomy for information security metrics

Authors:
Reijo M. Savola
Affiliations:
VTT Technical Research Centre of Finland, Oulu, Finland
Venue:
Proceedings of the 2007 ACM workshop on Quality of protection
Year:
2007

Citing 2
Cited 6

Information Assurance Measures and Metrics " State of Practice and Proposed Taxonomy

HICSS '03 Proceedings of the 36th Annual Hawaii International Conference on System Sciences (HICSS'03) - Track 9 - Volume 9
On the Brittleness of Software and the Infeasibility of Security Metrics

IEEE Security and Privacy

Resilience and survivability in communication networks: Strategies, principles, and survey of disciplines

Computer Networks: The International Journal of Computer and Telecommunications Networking
Security and performance in service-oriented applications: Trading off competing objectives

Decision Support Systems
Evidential structures and metrics for network forensics

International Journal of Internet Technology and Secured Transactions
A formal approach towards measuring trust in distributed systems

Proceedings of the 2011 ACM Symposium on Applied Computing
Using time-driven activity-based costing to manage digital forensic readiness in large organisations

Information Systems Frontiers
Taxonomy of quality metrics for assessing assurance of security correctness

Software Quality Control

Quantified Score

Hi-index	0.00

Visualization

Abstract

Systematic approaches to measuring security are needed in order to obtain evidence of the security performance of products or an organization. In this study we survey the emerging security metrics approaches from the academic, governmental and industrial perspectives and aim to bridge the gap between information security management and Information and Communication Technology (ICT) product security practices. If common metrics approaches between different security disciplines can be found, this will advance our holistic understanding and capabilities, both in management and engineering practices.