Quantitative underpinnings of secure, graceful degradation
Ryan Wagner, David Garlan, Matt Fredrikson · 2018
System administrators are slowly coming to accept that nearly all systems are vulnerable and many should be assumed to be compromised. Rather than preventing all vulnerabilities in complex systems, the approach is changing to protecting systems under the assumption that they are already under attack.