...this ability to conjecture, to conceive things as they might be. To do so we must think differently about security,” saysCoviello. “As practitioners your mission is not to say ‘no’, but rather ‘how’.” He continued: The next...
http://blogs.zdnet.com/security/?p=1008