[January 31, 2003]

"The patch treadmill doesn't work. If you are monitoring your network carefully enough, you'll catch a hacker regardless of what vulnerability he exploited to gain access. Monitoring makes a network less dependent on keeping patches up to date; it's a process that provides security even in the face of ever-present vulnerabilities, uninstalled patches, and imperfect products."

—Bruce Schneier, Counterpane CTO
in The Register