Security Metrics: Replacing Fear, Uncertainty, and Doubt

最新推荐文章于 2024-07-16 08:00:32 发布

原创最新推荐文章于 2024-07-16 08:00:32 发布 · 675 阅读

1 ·

CC 4.0 BY-SA版权

文章标签：

#security #visualization #resources #patch #出版

Security 专栏收录该内容

144 篇文章

订阅专栏

本书桥接了管理层的定量视角与安全专业人员的实际操作方法，提供了来自软件、航空航天及金融服务行业的专家解决方案。读者将学会如何替换持续的危机响应为系统的安全性改进措施，理解好坏指标之间的区别，并衡量覆盖范围和控制、漏洞管理、密码质量等多个方面。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

Security Metrics successfully bridges managements quantitative viewpoint with the nuts-and-bolts approach typically taken by security professionals. It brings together expert solutions drawn from Jaquiths extensive consulting work in the software, aerospace, and financial services industries, including new metrics presented nowhere else. Youll learn how to

*Replace nonstop crisis response with a systematic approach to security improvement
*Understand the differences between good and bad metrics
*Measure coverage and control, vulnerability management password quality, patch latency, benchmark scoring, and business-adjusted risk
*Quantify the effectiveness of security acquisition, implementation, and other program activities
*Organize, aggregate, and analyze your data to bring out key insights
*Use visualization to understand and communicate security issues more clearly
*Capture valuable data from firewall and antivirus logs, third-party auditor reports, and other resources
*Implement balanced scorecards that present compact, holistic views of organizational security effectiveness

http://rapidshare.com/files/33202604/0321349989.rar