For Good Measure: The Undiscovered

Precis: Security metricians must steal all the techniques we can—we don’t have the time to invent everything we need from scratch. This column does just that, motivated by the question of whether patching matters, a question that just will not go away...