SQT

SQT is an open source program written in VB.Net that, implements a novel method for the security quantification of an Information System (IS), a service or a product. This new proposed security metric, is using stochastic calculus in order to provide us with a deterministic and unbiased measurement of the security level of an IS. Because the approach is vulnerability-driven, and for ensuring unbiased results, it uses the National Vulnerability Database.