The workshop is partially sponsored by the BCRYPT project of the Belgian Science Policy.

About the workshop

Quantitative assessment is a major stumbling block for software and system security. Although some security metrics exist, they are rarely adequate. The engineering importance of metrics is intuitive: you cannot consistently improve what you cannot measure. Economics is an additional driver for security metrics: vendors will only invest in security if customers will pay for it, and customers will only pay a premium for security that is measurably improved.

The goals of the MetriSec workshops are to showcase and foster research into security measurements and metrics and to keep building the community of individuals interested in this area. MetriSec continues the tradition started by the Quality of Protection (QoP) workshop series. As in the previous year, the co-location with ESEM is an opportunity for the security metrics folks to meet the metrics community at large.

ESEM is part of the Empirical Software Engineering International Week (ESEIW). The schedule is as follows.