Title :
Measuring Security
Author :
Stolfo, Sal ; Bellovin, Steven M. ; Evans, David
Abstract :
The field of computer and communications security begs for a foundational science to guide system design and to reveal the safety, security, and possible fragility of the complex systems we depend on today. To achieve this goal, we must devise suitable metrics for objectively comparing and evaluating the security of system designs and organizations.
Keywords :
organisational aspects; security of data; software metrics; software performance evaluation; complex systems fragility; complex systems safety; complex systems security; computer and communications security; foundational science; organizations; security measurement; security of data; suitable metrics; system designs; Computational modeling; Computer security; Cryptography; Economics; Information analysis; Measurement; Statistics; adversary models; computer security; cybersecurity metrics; defense in depth; intrusion detection systems;
Journal_Title :
Security & Privacy, IEEE
DOI :
10.1109/MSP.2011.56
