Education is a big aspect so employees understand what would be a problem. When I first started consulting in the business -- up until three years ago -- I never used antivirus software. And I never had a virus because the whole point was to tell people the only things they should be clicking on are things from these departments and only these kinds of attachments.

You described a new project called the Model of Human Behavior in Cyberspace that NRO is involved with. How does this project work? It is not officially a government project. There is a lot of interest in the government and certain sectors of the government that would like to provide funding for it, but with distributed development [and] centrally managed by a core board of directors. The people who sit on that board are people like myself, but we also have a psychologist, people from universities and a neuroscientist. In a bricks-and-mortar world, police agencies and the FBI will go to a psychologist and say the guy [criminal suspect] has been exhibiting these things. What should we know? They will give you a profile, what you can do to counter it. If you bring them stuff from the computer and say, "These are his e-mail names, etc.; what should we expect?" they will say they have no idea.

What is the status of the study? It is in Phase 1 -- determining what questions can be answered and which ones can't. Could I ever produce a mathematical formula that could describe a human's behavior? We are trying to determine if that is even a question we can answer. We also have to understand the real sample size. Ultimately, we would love to be able to do everyone in the U.S., but that is not realistic. Are there issues between genders, ethnicity and age? We're also trying to figure out how the funding works.