Eugene H. Spafford
Purdue University
The epistemology of computer security
ACM SIGSOFT Software Engineering Notes
Asking the wrong questions when building and deploying systems results in systems that cannot be sufficiently protected against the threats they face.