The article introduces a new way to measure how well security controls work, using three specific metrics: Attack Resiliency Measure, Performance Improvement Factor, and Cost/Benefit Measure. The researchers focused on evaluating the security of a protocol for secure virtual machine migration, which is important in the rapidly changing world of virtualization technology. They found that their metrics can effectively assess the security of this protocol, helping to improve its performance and cost-effectiveness.