Take a sneak peek at the new NIST.gov and let us know what you think!
(Please note: some content may not be complete on the beta site.).
NIST Authors in Bold
|Author(s):||Paul E. Black; Karen A. Scarfone; Murugiah P. Souppaya;|
|Title:||Cyber Security Metrics and Measures|
|Published:||March 02, 2009|
|Abstract:||Metrics are tools to facilitate decision making and improve performance and accountability. Measures are quantifiable, observable, and objective data supporting metrics. Operators can use metrics to apply corrective actions and improve performance. Regulatory, financial, and organizational factors drive the requirement to measure IT security performance. Potential security metrics cover a broad range of measurable features, from security audit logs of individual systems to the number of systems within an organization that were tested over the course of a year. Effective security metrics should be used to identify weaknesses, determine trends to better utilize security resources, and judge the success or failure of implemented security solutions.|
|Citation:||Article in Wiley Handbook of Science and Technology for Homeland Security|
|Publisher:||John Wiley & Sons, Inc., Hoboken, NJ|
|Keywords:||computer systems,cyber security,homeland security, IT,measures,metrics,software|
|Research Areas:||Software Testing Metrics|
|PDF version:||Click here to retrieve PDF version of paper (69KB)|