Infoseconomics: A Utility Model for Information Security

摘要

We propose a new model for security based on the utility of information availability. Where certain information should be made available to a certain person, the utility of that access is given a positive value, and where the information should not be made available, it is given a negative value. The magnitude of the utility describes the importance of allowing or preventing the access. We describe extensions to the model for time, context, and subjective dependencies, and show how it can be applied in some simple situations.