Security Metrics: Replacing Fear, Uncertainty, and Doubt

6

Visualization

One picture is worth ten thousand words.

—Fred R. Barnard (1927)

Graphic design which evokes the symmetria of Vitruvius,the dynamic symmetry of Hambidge,the asymmetry of Mondrian;which is a good gestalt,generated by intuitionor by computer,by inventionor by a system of coordinates,is not good designif it does not communicate.

—Paul Rand (1985)

Security is such a complex topic that it defies easy description. In addition to the natural camouflage afforded the subject by its often-esoteric terminology and concepts, the sheer scope and volume of available security data overwhelms practitioners and laypeople alike. Because of these two facts, most information security professionals have no real idea how to “show security,” either ...