|
计算机科学 2008
Information System Security Metrics:Theoretics and Methodology
|
Abstract:
As information security lost continues to rise,public and private organizations contend that metrics initiatives will become critical to managing and understanding the impact of information security programs.Information security metrics theory was introduced and the several key steps to implement metrics program were defined.Considering the security capabilities,security cost and security countermeasures,we addressed a baseline-based information security metrics model and applied the fuzzy synthetic techniq...