Issue No. 06 - November/December (2008 vol. 6)
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/MSP.2008.151
Daniel E. Geer Jr. , In-Q-Tel
Daniel G. Conway , Augustana College
Dan Geer and Dan Conway discuss security as a subset of reliability. Security involves a subspace of reliability—only particular deviations—thus, security must be easier than reliability. Hastening over the delicate premise that the specification is always accurate and up-to-date, we can roughly align security with the subset of reliability where the cost of deviation per unit time is very high. This makes us wonder about measuring how risk tolerance scales and, consequently, where to point our thumbs.
Security, reliability, Dan Geer, metrics, economics of security, For Good Measure, Dan Conway
Daniel E. Geer Jr., Daniel G. Conway, "Security Is a Subset of Reliability", IEEE Security & Privacy, vol. 6, no. , pp. 86-87, November/December 2008, doi:10.1109/MSP.2008.151