An information security measurement model based on Metrology
Ma Fang · Information Security and Communications Privacy · 2008
The infosec estimation has its own specific characteristics. In exception of the measurement correlated with time, the Syste`me International d' Unites(SI) is hardly to be applied in the other fields of infosec estimation,thus it is in want of the method for quantitative analysis on the uncertainty of infosec estimation. Comparatively speaking,with the support by mature technologies of physical and chemical measurement sciences,it is relatively easy for the measurement of hardware component,while much more complicated and difficult for the measurement of software component due to lack of the measures in software aspect. Applying the principle and method of metrology in information technology security measurement, the paper proposes a information security measurement model, with detailed describing the pro-cess model and information model of security measurement.