Abstract

Security measurement models (SMMs) and their corresponding derived metrics form the main pillars of a systematic security measurement. Providing a desirable SMM is very challenging and has been investigated over the past two decades, so that numerous SMMs have been proposed and several surveys on SMMs have been performed. However, to the best of our knowledge, neither a systematic taxonomy nor a comprehensive comparison has yet been proposed for SMMs. This paper focuses on the comprehensive comparison of SMMs relying on a feature-based approach. The plurality and diversity of the compared SMMs enable us to deduce all the open issues.

摘要

安全测量模型 (SMM) 及其相应的派生指标构成了系统安全测量的主要支柱。提供理想的 SMM 是非常具有挑战性的，并且在过去的二十年中已经进行了研究，因此提出了许多 SMM，并且已经对 SMM 进行了多项调查。然而，据我们所知，尚未针对 SMM 提出系统的分类法或全面的比较。本文重点关注基于特征的方法对 SMM 的综合比较。所比较的 SMM 的多样性和多样性使我们能够推断出所有未解决的问题。