Bad Security Metrics Part 1: Problems

Flater, David

doi:https://doi.org/10.1109/MITP.2018.011301733

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Journal Article

Bad Security Metrics Part 1: Problems

Documentation Topics

Published: February 14, 2018
Citation: IT Professional vol. 20, no. 1, (January-February 2018) pp. 64-68

Author(s)

David Flater (NIST)

Abstract

This two-part series focuses on defining the problem of questionable metrics conceptually and revealing a path forward for improving both security metrics and how people use them.

Keywords

security; measurement; metrics; scale theory

Control Families

None selected

Documentation

Publication:
https://doi.org/10.1109/MITP.2018.011301733

Supplemental Material:
Preprint (pdf)

Related NIST Publications:
Journal Article

Document History:
02/14/18: Journal Article (Final)

Topics

Security and Privacy

security measurement