Infoseconomics: A Utility Model for Information Security
A new model for security based on the utility of information availability is proposed, which describes extensions to the model for time, context, and subjective dependencies, and shows how it can be applied in some simple situations.
Abstract
Abstract : We propose a new model for security based on the utility of information availability. Where certain information should be made available to a certain person, the utility of that access is given a positive value, and where the information should not be made available, it is given a negative value. The magnitude of the utility describes the importance of allowing or preventing the access. We describe extensions to the model for time, context, and subjective dependencies, and show how it can be applied in some simple situations.