For Good Measure: The Undiscovered

Précis: Security metricians must steal all the techniques we can—we don’t have the time to invent everything we need from scratch. This column does just that, motivated by the question of whether patching matters, a question that just will not go away...