deterrence, vulnerability reduction, education and
training. Clearly, a portfolio of strategies is preferred over the
adoption of a single solution. Each security strategy entails different
costs, effectiveness, and potential benefits; many of these are
difficult to quantify