https://rud.is/b/2012/01/02/improve-your-security-metrics-for-14-00usd/