Security: technical, social, and legal challenges

Information security is increasingly making headlines these days, and usually the news is not good, some new Internet worm, virus, or Trojan is devastating corporate networks. After more than 25 years of research and engineering, why is our information infrastructure more at risk than ever? Unfortunately, there is no simple answer to this question, and there are no simple solutions. Addressing the problem requires understanding the nature of security and appreciating the need for a more scientific approach. A long-term solution involves significantly improving the design and implementation of software, which demands collaboration between security professionals and software engineers.