@conference {229565, author = {Jim Thomson and David Laing}, title = {Extending the Error Budget Model to Security and Feature Freshness}, year = {2019}, address = {Brooklyn, NY}, publisher = {USENIX Association}, month = mar }