mailing list archives
security metrics and evaluation methodologies
From: "Nguyen Pham" <nguyen.petronius () gmail com>
Date: Mon, 21 Aug 2006 12:01:19 +0200
Is there any review, state of the art or state of the practice report that
compare and analysis current available security metrics for security
assurance measurement or assessment purpose?
Also, could you suggest me some resources analyzing existing methodologies
(such as OCTAVE, MEHARI, EBIOS, etc.) that can be used to evaluate security
assurance of an IT infrastructure?
Any suggestion and recommendation is welcome.
Thank you for your help.
Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia - http://secunia.com/