@misc{1334491,
  author = {Peter Mell and Karen Scarfone},
  title = {The Common Configuration Scoring System (CCSS): Metrics for Software Security Configuration Vulnerabilities},
  year = {2010},
  month = {2010-12-27 00:12:00},
  publisher = {NIST Interagency/Internal Report (NISTIR), National Institute of Standards and Technology, Gaithersburg, MD},
  url = {https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=906165},
  doi = {https://doi.org/10.6028/NIST.IR.7502},
  language = {en},
}