17
Without R|G: Today
N attacks/yr
Less
valuable
 assets
More
valuable
 assets
My Computer
m attacks/yr
Total: N+m attacks/yr on all assets
(N >> m)
Less trustworthy
Less accountable
entities
More trustworthy
More accountable
entities
Entities
- Programs
- Network hosts
- Administrators
Almost everyone has a “red” machine
Security settings optimized for immediate productivity not long-term security
So… The untrustworthy or unaccountable get to interact with important assets