The field of computer and communications security begs for a foundational science to guide system design and to reveal the safety, security, and possible fragility of the complex systems we depend on today. To achieve this goal, we must devise suitable metrics for objectively comparing and evaluating the security of system designs and organizations.
No takes yet. Share an insight, caveat, or question.
Stolfo et al. (2011) studied this question.
Synapse has enriched 4 closely related papers on similar clinical questions. Consider them for comparative context: