There be humans here...

• Human beings are at the heart of most security issues

  • Malicious code involves human beings
    • The legitimacy of code is a function of intent
    • Most people don't know what they want
  • The users must be willing to use it
    • It has to be relatively transparent & automatic
    • We can't yet stop them from doing stupid things
  • Insiders are people too
    • We need to address the insider threat here

Notes: