4 ms·
No, it is not. It is not the same to prevent you from accessing your information (however high-value or critical it might be) than having the very same informat
by crpatino 14y ago
No, it is not. It is not the same to prevent you from accessing your information (however high-value or critical it might be) than having the very same information being actively used against you in unforeseeable ways.
Besides, this statement runs against the core principles of Risk Management, which recognizes the need to prioritize the use of scarce resources to protect the most salient risk according to a utility function that combines but the likeliness and the adverse consequences of each potential incident.
- sophacles 14y agoNot necessarily - There are many times integrity and access are far more important than confidentiality - control systems for example. For sensor streams, availability may even be more important than integrity. There are already algorithms in place in control systems to deal with bad or weird data from those sensors because sensors go funky all the time. having the tampered data is still a form of information that the sensor is still there, a surprisingly useful bit of data itself. There is a lot of research in control system security about balancing extremely high availability requirements against bad data and commands coming in -- trying to answer the question "how do we run compromised" because sometimes you have to, at least for a limited time, to prevent bigger systemic damage.