@conference{96591,
  author = {Karen Scarfone},
  title = {Evidence-Based, Good Enough, and Open},
  year = {2008},
  month = {2008-08-04},
  publisher = {Third Workshop on Security Metrics, San Jose, CA},
  url = {https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=890007},
  language = {en},
}