Combination model of heterogeneous data for security measurement

Measuring security is a core step for guaranteeing security of network and information systems. Due to massiveness and heterogeneity of measurement data, it is difficult toclassify and combinethem on demand. In thispaper, consideringimplication relationship of metrics, we propose a combination model and combination policy for security measurement. Several examples demonstrate the effectiveness of our model.