@misc{1195461, author = {M Swanson and N Bartol and J Sabato and J Hash and L Graffo}, title = {Security metrics guide for information technology systems:}, year = {2003}, month = {2003-01-01 05:01:00}, publisher = {, National Institute of Standards and Technology, Gaithersburg, MD}, doi = {https://doi.org/10.6028/NIST.SP.800-55}, language = {en}, }