Measuring up: how to keep security metrics useful and realistic.

Shari Lawrence Pfleeger Measuring up: how to keep security metrics useful and realistic. 21 2007 QoP http://doi.acm.org/10.1145/1314257.1314258 conf/ccs/2007qop db/conf/ccs/qop2007.html#Pfleeger07