Ben Smith Measuring Security: How Do I Know What a Valid Metric Looks Like? (Slides)
Andrew McNicol & Zack Meyers Beyond Automated Testing (Slides)