Blogs about: Security Metrics
Featured Blog
The Future : Regulation is Futile - Market Forces Will Prevail
39,000 ft over yet another ocean …… I just watched an old Bill Joy talk from Ted 2006 via iTunes. Two key paraphrases struck me as prophetic. “You can’t regulate the problem away” “What we need is be… more →
Mark Curphey - SecurityBuddha.com
The Future : Regulation is Futile - Market Forces Will Prevail
— 6 comments
mcurphey wrote 2 months ago: 39,000 ft over yet another ocean …… I just watched an old Bill Joy talk from Ted 2006 via iTunes. Tw … more →
NIST Draft on Directions in Security Metrics Research
Jaime Raphael Licauco, CISSP, GSEC wrote 3 months ago: There’s a new draft for evaluation released by the NIST on Directions in Security Metrics Rese … more →
NSA Posts Secrets to Writing Secure Code - Write at 38 LOC Per Day
— 5 comments
mcurphey wrote 8 months ago: The National Security Agency has released a case study showing how to cost-effectively develop code … more →
GRC - Why It's of LIMITED Interest to Me
— 5 comments
mcurphey wrote 1 year ago: I wanted to post a “rah rah” message to Rich Mogul when he posted that GRC platforms Are … more →
Are you Sure you are Measuring Correctly? - Part I
— 2 comments
cyberphob1a wrote 1 year ago: It’s been a while since I’ve last posted about the organizational side of security. My w … more →
Metrics that Matter
— 1 comment
mcurphey wrote 1 year ago: Ask a wine maker if climate change is real. This year there will be no organic wine from Burgundy. … more →
Count What Counts
— 1 comment
mcurphey wrote 1 year ago: Working at Microsoft can be hard. You have to force yourself to not get distracted by all the smart … more →
A Sneak Peek at Some Cool Software Security Tools
— 10 comments
mcurphey wrote 1 year ago: My last blog leads me neatly onto to the good stuff. Joining a new company is like a poker game. Th … more →
Marc Andreessen on Platforms
mcurphey wrote 1 year ago: Marc’s post here is well worth a read. Level 1 is what I call an “Access API”. Le … more →
Security Data Visualization Book
mcurphey wrote 1 year ago: Just picked up from O’Reilly, a new book called Security Data Visualization. It looks to be ve … more →
This Metric Shows Behavioral Change
mcurphey wrote 1 year ago: A week ago I posted that Metrics Should Change Behavior and used what I think is a clever play on s … more →
Metrics Should Change Behaviour
— 6 comments
mcurphey wrote 1 year ago: A British University studied 1,050 rock stars and concluded: European artists are twice as likely to … more →
The Security Genome - Understanding How People Find Security Bugs
— 6 comments
mcurphey wrote 1 year ago: I think I may buy shares in Wired. I seem to plug it every month when I read articles of interest th … more →
More Long Tail Security Thoughts
— 2 comments
mcurphey wrote 1 year ago: Judging by the blog stats readers have been enjoying my Trends for Information Security an … more →
The Long Tail of Information Security (Part 2)
— 4 comments
mcurphey wrote 1 year ago: My last post The Long Tail of Information Security (Part 1) described why I think information secur … more →
The Long Tail of Information Security (Part 1)
— 5 comments
mcurphey wrote 1 year ago: I have just finished reading the Long Tail by Chris Anderson (editor of Wired). It is brillia … more →
Trends in Information Security
— 11 comments
mcurphey wrote 1 year ago: I found myself thinking some “big sky” thoughts about trends in information securit … more →
Information Security Metrics Dashboard Example - People Productivity
— 2 comments
mcurphey wrote 1 year ago: I am in London with my friend Andreas Fuchsberger. He jokingly showed me his information security pe … more →
Information Security Metrics Dashboard
mcurphey wrote 2 years ago: http://www.enterprise-dashboard.com/2007/03/14/information-security-metrics-dashboard-a-rare-insider … more →
Have your say. Start a blog.
See our free features →
An 
Medley
