full-disclosure - security metrics and evaluation methodologies

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <d3e0607e0608210832r657377d4v46c2d5c27cdebfcc@mail.gmail.com>
Date: Mon, 21 Aug 2006 17:32:02 +0200
From: "Nguyen Pham" <nguyen.petronius@...il.com>
To: pen-test@...urityfocus.com, full-disclosure@...ts.grok.org.uk
Cc: 
Subject: security metrics and evaluation methodologies

Hi list,

Is there any review, state of the art or state of the practice report that
compare and analysis current available security metrics for security
assurance measurement or assessment purpose?

Also, could you suggest me some resources analyzing existing methodologies
(such as OCTAVE, MEHARI, EBIOS, etc.) that can be used to evaluate security
assurance of an IT infrastructure?

Any suggestion and recommendation is welcome.
Thank you for your help.

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/