Measurement of Information Security