The Future of Security Nominal Delivery Draft, Rocky Mountain Information Security Conference, 18 May 2012

Were this a formal debate, the title would be the assertion “Resolved: The Internet is no place for critical infrastructure.” I say that, in part, to get your attention and in part to open a line of thought about what is critical and the degree to which that which is critical is defined as a matter of principle and the degree to which that which is critical is defined  operationally; that is to say, I am distinguishing what we say and what we do.