Addressing misalignment between information security metrics and business-driven security objectives
暂无分享,去创建一个
[1] S. B. Kiselev,et al. The capability maturity model: guidelines for improving the software process , 1995 .
[2] Rayford B. Vaughn,et al. Information assurance measures and metrics - state of practice and proposed taxonomy , 2003, 36th Annual Hawaii International Conference on System Sciences, 2003. Proceedings of the.
[3] Stefan Biffl,et al. Business process-based valuation of IT-security , 2005, ACM SIGSOFT Softw. Eng. Notes.
[4] Xiaoqing Frank Liu,et al. QFD application in software process management and improvement based on CMM , 2005, WoSQ@ICSE.
[5] Ehab Al-Shaer,et al. Vulnerability analysis For evaluating quality of protection of security policies , 2006, QoP '06.
[6] 日本規格協会. 情報技術-セキュリティ技術-情報セキュリティマネジメントシステム-要求事項 : 国際規格ISO/IEC 27001 = Information technology-Security techniques-Information security management systems-Requirements : ISO/IEC 27001 , 2005 .
[7] Myeonggil Choi,et al. Managing Quality Level for Developing Information Security System Adopting QFD , 2008, 2008 Ninth ACIS International Conference on Software Engineering, Artificial Intelligence, Networking, and Parallel/Distributed Computing.
[8] Andy Ju An Wang. Information security models and metrics , 2005, ACM-SE 43.
[9] Ita Richardson,et al. Development of a Generic Quality Function Deployment Matrix , 2002 .
[10] Louis Cohen,et al. Quality Function Deployment: How to Make QFD Work for You , 1995 .
[11] Alan Bundy,et al. Constructing Induction Rules for Deductive Synthesis Proofs , 2006, CLASE.
[12] Christian Frühwirth. On Business-Driven IT Security Management and Mismatches between Security Requirements in Firms, Industry Standards and Research Work , 2009, PROFES.
[13] Susan Carlson Skalak. House of Quality , 2002 .
[14] Andrew Jaquith. Security Metrics: Replacing Fear, Uncertainty, and Doubt , 2007 .
[15] Antonia Stefani,et al. Meta-metric Evaluation of E-Commerce-related Metrics , 2009, SQM@CSMR.
[16] Nancy R. Mead,et al. Experiences in Eliciting Security Requirements , 2006 .
[17] Michael Power,et al. The risk management of everything: rethinking the politics of uncertainty , 2004 .
[18] Barry W. Boehm,et al. EasyWinWin: a groupware-supported methodology for requirements negotiation , 2001, ESEC/FSE-9.
[19] O. Sami Saydjari. Is risk a good security metric? , 2006, QoP '06.