Five years from now:

• Buffer overflows will still exist in 'secure' products
• 'Secure' operating systems and net protocols will still crash when applications misbehave

We will have:

• Sufficient functionality
• Plenty of performance
• But not enough ASSURANCE
  

In the next five years
we will counter many “hacker” attacks but
we will not be safe from Nation States and other large entities.

A Truly Dangerous Stance:

• We will think we are secure, but we will not be.
• Assurance techniques adequate for a benign environment will not hold up in a malicious environment.