Security Meter: A Practical Decision-Tree Model to Quantify Risk
Mehmet Şahinoglu · IEEE Security & Privacy · 2005
Several security risk templates employ nonquantitative attributes to express a risk's severity, which is subjective and void of actual figures. The author's design provides a quantitative technique with an updated repository on vulnerabilities, threats, and countermeasures to calculate risk.