TIM-8355: v1

Hubbard, D. W., Seieresen, Geer, D. E., & McClure, S. (2016). How to measure anything in cybersecurity risk. Wiley.
Read Chapter 2: A Measurement Primer for Cybersecurity
This chapter describes the basics of cybersecurity measurement.
Read Chapter 3: Model Now! An Introduction to Practical Quantitative Methods for Cybersecurity
This chapter describes how to utilize uncertainty math to quantify risk and security control implementation.
Read Chapter 10: Towards Security Metrics Maturity
This chapter discusses how to develop and implement functional security metrics (FSMs).

Sathya, A., & Raja, S. K. S. (2021). Privacy preservation-based access control intelligence for cloud data storage in smart healthcare infrastructure. Wireless Personal Communications: An International Journal, 118(4), 3595–3614.
This journal article explores the performance of the proposed Euclidean L3P-based Multi-Objective Successive Approximation (EMSA) algorithm, an efficient measure of privacy in the Healthcare Cloud as compared with Bat, PUBAT, TPNGS, WOA, and CIC-WOA algorithms based on performance metrics, such as fitness, privacy, and utility.

Thekdi, S. A., & Chatterjee, S. (2019). Toward adaptive decision support for assessing infrastructure system resilience using hidden performance measures. Journal of Risk Research, 22(8), 1020–1043.
This journal article details a study involving developing methodologies for assessing community perceptions of infrastructure system resilience using observable factors and inferring possibly hidden performance measures for facilitating adaptive decision-support. The methods are demonstrated with hypothetical spatiotemporal data across multiple system performance dimensions. The analysis results are useful for infrastructure security analysts, system decision-makers, and the general public.