Science of Security: Combining Theory and Measurement to Reflect the Observable.

What would a “Science of Security” look like? This question has received considerable attention over the past 10 years. No one argues against the desirability of making security research more “scientific.” But how would one would go about that? We argue that making progress on this requires clarifying what “scientific” means in the context of computer security, and that has received too little att...