Towards a taxonomy for information security metrics

Reijo Savola

doi:10.1145/1314257.1314266

Towards a taxonomy for information security metrics

Reijo Savola

Research output: Chapter in Book/Report/Conference proceeding › Conference article in proceedings › Scientific › peer-review

44 Citations (Scopus)

Abstract

Systematic approaches to measuring security are needed in order to obtain evidence of the security performance of products or an organization. In this study we survey the emerging security metrics approaches from the academic, governmental and industrial perspectives and aim to bridge the gap between information security management and Information and Communication Technology (ICT) product security practices. If common metrics approaches between different security disciplines can be found, this will advance our holistic understanding and capabilities, both in management and engineering practices.

Original language	English
Title of host publication	Proceedings of the 2007 ACM Workshop on Quality of Protection, QoP’07
Place of Publication	US
Publisher	Association for Computing Machinery ACM
Pages	28-30
ISBN (Print)	978-1-59593-885-5
DOIs	https://doi.org/10.1145/1314257.1314266
Publication status	Published - 2007
MoE publication type	A4 Article in a conference publication
Event	14th ACM Conference on Computer and Communications Security, CCS07 - Alexandria, Virginia, United States Duration: 29 Oct 2007 → …

Conference

Conference	14th ACM Conference on Computer and Communications Security, CCS07
Abbreviated title	CCS07
Country/Territory	United States
City	Alexandria, Virginia
Period	29/10/07 → …

Access to Document

10.1145/1314257.1314266

Cite this

@inproceedings{ab1b705f38ad4301bb419ba6f81e3bae,

title = "Towards a taxonomy for information security metrics",

abstract = "Systematic approaches to measuring security are needed in order to obtain evidence of the security performance of products or an organization. In this study we survey the emerging security metrics approaches from the academic, governmental and industrial perspectives and aim to bridge the gap between information security management and Information and Communication Technology (ICT) product security practices. If common metrics approaches between different security disciplines can be found, this will advance our holistic understanding and capabilities, both in management and engineering practices.",

author = "Reijo Savola",

year = "2007",

doi = "10.1145/1314257.1314266",

language = "English",

isbn = "978-1-59593-885-5",

pages = "28--30",

booktitle = "Proceedings of the 2007 ACM Workshop on Quality of Protection, QoP{\textquoteright}07",

publisher = "Association for Computing Machinery ACM",

address = "United States",

note = "14th ACM Conference on Computer and Communications Security, CCS07, CCS07 ; Conference date: 29-10-2007",

}

TY - GEN

T1 - Towards a taxonomy for information security metrics

AU - Savola, Reijo

PY - 2007

Y1 - 2007

N2 - Systematic approaches to measuring security are needed in order to obtain evidence of the security performance of products or an organization. In this study we survey the emerging security metrics approaches from the academic, governmental and industrial perspectives and aim to bridge the gap between information security management and Information and Communication Technology (ICT) product security practices. If common metrics approaches between different security disciplines can be found, this will advance our holistic understanding and capabilities, both in management and engineering practices.

AB - Systematic approaches to measuring security are needed in order to obtain evidence of the security performance of products or an organization. In this study we survey the emerging security metrics approaches from the academic, governmental and industrial perspectives and aim to bridge the gap between information security management and Information and Communication Technology (ICT) product security practices. If common metrics approaches between different security disciplines can be found, this will advance our holistic understanding and capabilities, both in management and engineering practices.

U2 - 10.1145/1314257.1314266

DO - 10.1145/1314257.1314266

M3 - Conference article in proceedings

SN - 978-1-59593-885-5

SP - 28

EP - 30

BT - Proceedings of the 2007 ACM Workshop on Quality of Protection, QoP’07

PB - Association for Computing Machinery ACM

CY - US

T2 - 14th ACM Conference on Computer and Communications Security, CCS07

Y2 - 29 October 2007

ER -

Towards a taxonomy for information security metrics

Abstract

Conference

Access to Document

Fingerprint

Cite this