“Metrics” in its name, has to date focused on the “TE” (tools evaluation) portion of
its charter, and so has yet to begin pursuing work in this area.
Software Security Assurance State-of-the-Art Report (SOAR) 297
Section 8 Observations