Security devices on a network are difficult to quantify when it comes to
successes.
Think of them as more of an insurance policy, How you would measure the
success of your car insurance or home insurance?
You can take logs or alerts from the various devices and use these to build
metrics but these types of measurements are very subjective.
-----Original Message-----
From: brent.thompson@csd.disa.mil [mailto:brent.thompson@csd.disa.mil]
Sent: Wednesday, August 23, 2006 4:18 PM
To: security-basics@securityfocus.com
Subject: Couple of security questions
Can anyone tell me is their metric on how many intrusion detection analyst
per number of servers? If so, where can I find it? Also.Does anyone know
where I can obtain security metrics for success (i.e. how do you measure
what you are doing and if it is being reached).
---------------------------------------------------------------------------
This list is sponsored by: Norwich University
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence
in Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Using interactive e-Learning technology, you can earn this esteemed degree,
without disrupting your career or home life.
http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------
---------------------------------------------------------------------------
This list is sponsored by: Norwich University
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence
in Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Using interactive e-Learning technology, you can earn this esteemed degree,
without disrupting your career or home life.
http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------
