Survivability—a new technical and business perspective on security
Howard F. Lipson, David Fisher · 1999
In recent years, there have been dramatic changes in the character of security problems, in their technical and business contexts, and in the goals and purposes of their stakeholders. As a consequence, many of the assumptions underlying traditional security technologies are no longer valid. Failure to recognize the depth and breadth of these changes in combination prevents effective solutions to modern security problems. Survivability provides a new technical and business perspective on security, which is essential to our search for solutions. Moreover, our survivability approach expands the view of security from a narrow technical specialty, accessible only to security experts, towards a risk-management perspective that requires the participation of an organization as a whole (executive management, security experts, application domain experts, and other stakeholders) to protect mission-critical systems from cyber-attacks, failures, and accidents.