The metrics tag has no wiki summary.
11
votes
4answers
465 views
How do you estimate the costs of a security breach?
I'm a student and fairly new to the IT security field. Most articles and books say you should only patch a vulnerability if the costs of a breach are higher than the costs of patching the ...
7
votes
2answers
236 views
What key metrics should a CIO rely on to gauge the extent of IT risk exposure?
Note - This was originally asked in another Area51 proposal, which has since been deleted.
5
votes
2answers
690 views
Google Analytics on a secured site
Just read this article on Google Analytics and the risk of forged certificates, where it said:
Sooner or later it's going to happen; obtaining forged SSL certificates is just too easy to hope ...
5
votes
2answers
726 views
Annual Rate of Occurrence (ARO) and Exposure Factor (EF) Data
I'm calculating loss expectancy (SLE/ALE) but where or how does one get data on annual rates of occurrences for various things? From simple hard-drive failure rates to something complex like the ...
2
votes
2answers
53 views
Commonly observed attack patterns modelled in Honeypot configurations
(Judging by voting and answers, I failed rather badly at asking a question that in my head was superbly clear. Clearly I was wrong. I've since attempted to rephrase the original question to more ...
0
votes
1answer
56 views
Security comparisons between two approaches: how to distinguish FUD from Substance? [closed]
Background:
WorkerB and Tymac were discussing the pros-and-cons of using two different alternatives for extending a web content management system that is used in their company.
Alternative one ...
