Availability policies in an adversarial environment

Abstract

Availability of our information systems is crucial. Yet availability policies have received a disproportionately small share of INFOSEC attention. This paper explores current assumptions about availability and proposes a new availability policy paradigm operating in an adversarial cyberspace environment. In the proposed paradigm, threats are social as well as technical, and content availability is as important as system availability. Availability measures may take on negative values.