Towards Operational Measures of Computer Security
Bev Littlewood, Sarah Brocklehurst, Norman Fenton, Peter David Mellor, Stella Page, David Wright, John F. Dobson, John A. McDermid, Dieter Gollmann · Journal of Computer Security · 1993
Ideally, a measure of the security of a system should capture quantitatively the intuitive notion of ‘the ability of the system to resist attack’. That is, it should be operational, reflecting the degree to which the system can be expected to remain