Refine risk calibration and threat modeling for availability and self-attacks