The Economics of Finding and Fixing Vulnerabilities in Distributed Systems
...naked until the tide goes out." In our world, we don't know whose systems are running naked, with no controls, until they are attacked. Of course, by then it is too late
So the security industry understands enough about risk management that the language of risk has permeated almost every product, presentation, and security project for the...
