Answers are grounded in this paper and cite their sources.
Security risk models have successfully estimated the likelihood of attack for simple security threats such as burglary and auto theft. Before we can forecast the risks to computer systems, we must first learn to measure the strength of their security
No takes yet. Share an insight, caveat, or question.
Stuart Schechter (2005) studied this question.
Synapse has enriched 10 related papers. Consider them for comparative context: