Towards a Classification of Security Metrics In Proceedings of the 2nd International Workshop on Security in Information Systems - Volume 0ICEIS, 341-350, 2004 , Porto, Portugal