@inproceedings {179527, title = {Learning from Early Attempts to Measure Information Security Performance}, booktitle = {5th Workshop on Cyber Security Experimentation and Test (CSET 12)}, year = {2012}, address = {Bellevue, WA}, url = {https://www.usenix.org/conference/cset12/workshop-program/presentation/Zhang}, publisher = {USENIX Association}, month = aug }