About UNIQ²Me
UNIQ²Me stands for Unified Qualitative and Quantitative Measurements for Cybersecurity Assessment. It organizes binary assessment questions, their supporting records, and requirement selections so that readers can find the conditions relevant to a decision.
This documentation follows the research manuscript by Stefanos Petsios, Kyriakos Stefanidis, and Chrysostomos D. Stylios.
The contribution
The method connects four elements:
- Annotated questions with plain and technical explanations.
- Binary SF answers organized into sixteen-question sets.
- Reversible hexadecimal profiles and Boolean requirement-mask checks.
- Catalog identities that preserve the meaning and provenance of a result.
The contribution concerns how assessment information is recorded and compared. It does not introduce hexadecimal arithmetic or replace an evidence-based assessment process.
Planned early release
The reviewed complete catalog and canonical guidance will be published with the finished paper. The manuscript uses the illustrative first-release designation groupa/en/26a; the actual publishing namespace will be recorded in the release manifest.
| Resource | Intended purpose |
|---|---|
| JSON question catalog | Stable identifiers, evidence criteria, explanations, and references. |
| Human-readable web documentation | A readable view of the same questions and release metadata. |
| Canonical open-source solutions | Implementation guidance, verification steps, and expected evidence. |
| Reviewed MASKS | Catalog masks, SFS masks and individual-SF masks, with exact catalog bindings and review records. |
| Trained small language model | Assistance with evidence interpretation, proposed judgments, and guidance. |
The manuscript describes prepared questions and canonical solutions. Current development branches contain set descriptions, draft SF placeholders and draft arithmetic masks. These authoring materials are distinct from the reviewed catalog and guidance that will accompany the finished paper.
The publishing namespace, exact release snapshot, public entry points, and licenses need confirmation. Model development and experimental validation remain ongoing work. No trained model or measured performance gain is announced here.
What still needs evaluation
A study should give independent assessors the same questions and evidence, then examine agreement and the effects of the judgment-priority rules. A comparison with a conventional checklist should measure time and errors when locating unmet requirements or retrieving records.
Further work concerns catalog coverage, evidence expiry, repeated snapshots, partial or pending findings, and the effort needed to maintain the record. AI experiments also need an adjudicated corpus, independent test cases, documented model versions, and measures of unsupported positive judgments and reviewer effort.
The AI-assisted assessment guide describes those experimental questions in more detail.
Contribute a question or correction
A useful proposal includes the question, source requirement, plain explanation, technical criterion, examples of acceptable evidence, and any reference implementation.
Review should check that the question asks about one assessable condition, that a positive answer is interpreted consistently, and that overlap with other SFs is documented. Translations need reviewed equivalence. Synthetic or sanitized examples can support discussion without exposing operational secrets.
Accepted changes that alter a question's meaning or position belong to a new catalog edition with a mapping to its predecessor. The proposed contribution process also preserves rejected proposals, review decisions, and source provenance.
Start with question records and catalog versions, then contact the author with your proposal. An established contributor community or community validation is not claimed.
Authors
- Stefanos Petsios — corresponding author, Ioannina, Greece.
- Kyriakos Stefanidis — Industrial Systems Institute, ATHENA Research Center, Greece.
- Chrysostomos D. Stylios — Department of Informatics and Telecommunications, University of Ioannina, Greece.
See contact for manuscript questions, corrections, and collaboration.