Supporting software security by measuring, coordinating, and enforcing software trustworthiness

公众在选择安全软件来保护他们的计算机时，往往几乎没有什么指导。这个问题之所以如此困难，是因为缺乏关于计算机系统(及其软件)的哪些特定部分(各种防病毒、反间谍软件和防火墙软件)实际监控和防御的信息。信息安全专家通常建议多层防御(即“深度防御”)，但几乎没有具体证据来判断应该选择哪个软件或确定这些层的组成。

The public often has little guidance when selecting security software to defend their computers. What makes this problem so difficult is the lack of information on what specific parts of a computer system (and its software) various anti-virus, anti-spyware, and firewall software actually monitor and defend. Information security experts typically recommend multiple layers of defense (i.e., "defense-in-depth"), but there is little concrete evidence for judging what software to pick or determining the makeup of those layers.