Security Evaluation Expert System

Software is an important resource. It contains and controls data and other resources. Thus measures must be taken to protect that data and resources. Thus Software Metrics are measurement of some properties of a piece of software or its specifications. Metrics are very important in Software Quality Measurement. Since Tom De Marco rightly stated “You can’t control what you can’t measure.” Software control is the part of Software Risk Management Process. Software metrics are calculated on the basis of software risks encountered or which are imminent. Risk-aware organizations may choose proactively to specify, design, implement, operate and maintain their security controls, usually by assessing the risks and implementing a comprehensive security management framework. Many Information security standards promote good security practices and define frameworks or systems to structure the analysis and design for managing information security controls.