Security, privacy, and dependability metrics

It is well known that one can control only what he can measure; hence, measuring security, privacy, and dependability (SPD) is a key enabler of the SHIELD methodology.The focus in the SHIELD methodology was on domain-specific adaptability and prototypical demonstrations, but the overall concept and architecture is still based on modularity and scalability, meaning that the SHIELD behavior should not be linked to any specific implementation. This is particularly true for metrics evaluation: SPD composability is supposed to work properly with any possible metrics computation algebra or composition algorithm (see Chapter 4), thus ensuring future platform expandability. Within the SHIELD methodology several metrics computation approaches have been investigated, with two major methodologies developed, particularly suitable for (1) automated control rooms, for example, smart grids, and (2) the assessment of systems, answering the need for an automated (machine-supported) approach. These methodologies have been identified as the medieval castle approach and the multimetrics approach, and they are presented in this chapter, with links to application scenarios provided.