TY - RPRT TI - The common configuration scoring system (CCSS) : metrics for software security configuration vulnerabilities AU - Scarfone, Karen AU - Mell, Peter PY - 2010 PB - National Institute of Standards and Technology CY - Gaithersburg, MD SN - NIST IR 7502 DO - 10.6028/NIST.IR.7502 ER -