@misc{36061,
  author = {Peter Mell and Karen Scarfone},
  title = {The Common Configuration Scoring System (CCSS): Metrics for Software Security Configuration Vulnerabilities},
  year = {2010},
  month = {2010-12-27},
  publisher = {NIST Interagency/Internal Report (NISTIR), National Institute of Standards and Technology, Gaithersburg, MD},
  doi = {https://doi.org/10.6028/NIST.IR.7502},
  language = {en},
}