TY - CONF AU - Karen Scarfone C2 - Third Workshop on Security Metrics, San Jose, CA DA - 2008-08-04 LA - en PB - Third Workshop on Security Metrics, San Jose, CA PY - 2008 TI - Evidence-Based, Good Enough, and Open UR - https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=890007 ER -