Making security measurable and manageable | IEEE Conference Publication | IEEE Xplore