@misc{1138666,
  author = {Karen Scarfone and Peter Mell},
  title = {The common configuration scoring system (CCSS) ::metrics for software security configuration vulnerabilities},
  year = {2010},
  month = {2010-01-01 05:01:00},
  publisher = {, National Institute of Standards and Technology, Gaithersburg, MD},
  doi = {https://doi.org/10.6028/NIST.IR.7502},
  language = {en},
}