The scope of cyber security becomes wider and wider with time and cyber threats rapidly change. This strongly impacts the performance of companies whose success heavily depends on the health of the underlying network infrastructure. The ability to have a clear understanding of the security exposure of a network in its entirety hence becomes part of the mission of such companies. In this work we present the design and implementation of a distributed measurement solution to assess the cyber security exposure of an ICT Infrastructure. We provide means to define cyber security indicators through an automated and repeatable measurement process. We prove the efficiency of the presented methodology by testing it on real-world infrastructure facilities, discussing the results obtained in two different scenarios: a comparison of networks with different characteristics and a real-time monitoring of the defined metrics.

随着时间的流逝，网络安全的范围越来越广，网络威胁也在迅速变化。这严重影响了公司的绩效，而这些公司的成功在很大程度上取决于基础网络基础架构的运行状况。因此，对整个网络的安全风险有清晰了解的能力成为此类公司的使命之一。在这项工作中，我们介绍了分布式测量解决方案的设计和实现，以评估ICT基础架构的网络安全风险。我们提供了一种通过自动化和可重复的测量过程来定义网络安全指标的方法。我们通过在现实世界的基础设施上进行测试，并讨论在两种不同情况下获得的结果，来证明所提出方法的效率：