This Information Assurance Technology Analysis Center (IATAC) State of the Art Report (SOAR) provides a representative overview of the current state of the art of the measurement of cyber security and information assurance (CS/IA).  It summarizes the progress made in the CS/IA measurement discipline and advances in CS/IA measurement research since 2000.  Topics addressed include: terms and definitions used to describe CS/IA measurement; standards, guidelines, and best practices for development and implem

PRELUDE

• Why are we here?
  • Substantial research investments made and contemplated
  • Difficulty of showing measurable progress
  • Difficulty of sound evaluation alternatives
• Why am I here?
• Another quote from Lord Kelvin:
  • "No balloon or aeroplane will ever be practically successful." Network Advocate, April 26, 1902
  • (Wright brothers first flight: Dec. 17, 1903)