Just as we took on the Soviet nuclear threat in the middle of this century, we will need a new collection discipline, new analytic approaches, and new partnerships to deal with the information warfare threat in the 21st century. Neither government nor industry can solve these problems alone. We will have a much better chance of finding solutions if we work together over the long haul. What is less discussed is the need to bind a system of trust to the security systems. This is the only way that security will be truly achieved.
Security is concerned with locks, fences, and guards.
Trust is about whether they work. In network terms, security is not just about encryption . . . The technology to bring good information security to networks is fairly well developed and understood. It is based on the use of public key encryption and digital signatures. The means to provide trust is less well understood and is called key management infrastructure.