Those of us in security are very much like heart
doctors--cardiologists. Our patients know that
lack of exercise, too much dietary fat and smoking
are all bad for them. But they will continue to
smoke, and eat fried foods, and practice being
couch potatoes until they have their infarction.
Then they want a magic pill to make them better
all at once, without the effort. And, by the way,
they claim loudly that their condition really
isn't their fault-it was genetics, or the tobacco
companies, or McDonald's that was to blame. And
they blame us for not taking better care of them.
Does this sound familiar?
--Eugene Spafford
director of Purdue University's CERIAS center, in his acceptance speech for the NISSC National Computer Systems Security Award.