In a world of millions of networked devices it seems redundant to classify any one single element as "secure". The secure device cannot possibly trust any othe

In a world of millions of networked devices it seems redundant to classify any one single element as "secure". The secure device cannot possibly trust any other device, and those devices in turn cannot trust the secure device. By necessity we use a combination of different systems, and any one rogue system could undermine the rest. The only way to make that safe is to understand how different systems interact and ensure they are sand boxed from one another. This is particularly difficult when a single machine can have several processors running their own platform.