A large amount of effort is expended every year on finding and patching security holes.  The underlying rationale for this activity is that it increases welfare by decreasing the number of vulnerabilities available for discovery and exploitation by bad guys, thus reducing the total cost of instrusions.  Given the amount of effort expended, we would expect to see noticeable results in terms of improved software quality. 

A Panel Talk given by Vicraj Thomas at the 2008 NSF-IARPA SOS Workshop.

A presentation on Security and Composition given by John Rushby at the Science of Security Meeting in November of 2008.

This presentation looks at the following:

1. Network monitoring and tomography
2. Science of security: opportunities

This presentation was given at the 2008 Science of Security Workshop.  It addresses the following topics:

Is there a scientific way to measure security?

How should/do we measure security?