Experience Report: Trading Dependability, Performance, and Security through Temporal Decoupling

摘要

While it is widely recognized that security can be traded for performance and dependability, this trade-off lacks concrete and quantitative evidence. In this experience report we discuss (ⅰ) a concrete approach (temporal decoupling) to control the trade-off between those properties, and (ⅱ) a quantitative and qualitative evaluation of the benefits based on an online auction system. Our results show that trading only a small amount of security does not pay off in terms of performance or dependability. Trading security even more first improves performance and later improves dependability.