First report on security metrics and assessment

Summary
It provides a formal definition of the security metrics that can be used to characterise the guarantees offered by different providers T41