Senior policy analyst at Rand Corporation, where he specializes in the relationship between information technology and national security. The opinions expressed in this article are his alone and do not necessarily reflect those of Rand or its sponsors.