Daniel Geer Jr. from Verdasys wrote about measurable security at IEEE Security & Privacy:
The days when security was about adjectives (“More secure!â€) are over; the future belongs to those who can measure, and for that reason it is time that our problem statements be things that can be expressed in elegant form and be measured.