A method to dynamically alter the exposure of a host to contain an intrusion when it occurs
A. Gehani and G. Kedem, "RheoStat: Real-time Risk Management," presented at 7th International Symposium, RAID 2004, Sophia Antipolis, France, 2004.
Robert Axelrod uses game theory and decision theory to analyze risk in information systems
R. Axelrod, "Risk in Networked Information Systems," Office of the Assistant Secretary of Defense for Networks and Information Integration, 2003.