Bad Security Metrics Part 2: Solutions

Flater, David

doi:https://doi.org/10.1109/MITP.2018.021921653

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Journal Article

Bad Security Metrics Part 2: Solutions

Documentation Topics

Published: April 16, 2018
Citation: IT Professional vol. 20, no. 2, (March-April 2018) pp. 76-79

Author(s)

David Flater (NIST)

Abstract

This two-part series focuses on defining the problem of questionable metrics conceptually and revealing a path forward for improving both security metrics and how people use them.

Keywords

security; measurement; metrics; scale theory

Control Families

None selected

Documentation

Publication:
https://doi.org/10.1109/MITP.2018.021921653

Supplemental Material:
Preprint (pdf)

Related NIST Publications:
Journal Article

Document History:
04/16/18: Journal Article (Final)

Topics

Security and Privacy

security measurement