RE: Couple of security questions

["Robert D. Holtz - Lists" <robert.d.holtz () gmail com>]

Security devices on a network are difficult to quantify when it comes to
successes.  

Think of them as more of an insurance policy,  How you would measure the
success of your car insurance or home insurance?

You can take logs or alerts from the various devices and use these to build
metrics but these types of measurements are very subjective.

-----Original Message-----
From: brent.thompson () csd disa mil [mailto:brent.thompson () csd disa mil] 
Sent: Wednesday, August 23, 2006 4:18 PM
To: security-basics () securityfocus com
Subject: Couple of security questions

Can anyone tell me is their metric on how many intrusion detection analyst
per number of servers?  If so, where can I find it?  Also.Does anyone know
where I can obtain security metrics for success (i.e. how do you measure
what you are doing and if it is being reached).


---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence 
in Information Security. Our program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this esteemed degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------


---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence 
in Information Security. Our program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this esteemed degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------