Security Reputation Metrics

TL;DR

This paper discusses security reputation metrics that quantify and compare the security levels of organizations, aiding benchmarking, decision-making, and policy formulation to promote better security practices.

Contribution

It introduces the concept of security reputation metrics and highlights their importance for benchmarking and guiding security investments.

Findings

Security metrics enable organization comparison

They support decision-making and policy development

Metrics can influence responsible security investments

Abstract

Security reputation metrics (aka. security metrics) quantify the security levels of organization (e.g., hosting or Internet access providers) relative to comparable entities. They enable benchmarking and are essential tools for decision and policy-making in security, and may be used to govern and steer responsible parties towards investing in security when economic or other decision-making factors may drive them to do otherwise.