The solution used by the aircraft industry is to document, investigate, and mitigate to build a common defense against failures. This is the way operating syst

The solution used by the aircraft industry is to document, investigate, and mitigate to build a common defense against failures. This is the way operating systems like SunOS were developed and hardened. That ended with the move to commodity PC's. Critical infrastructure computing could adopt this approach to harden systems. Some companies already do this internally, but it should become more widespread. The language/OS/server architecture/flavor-of-the-day is a really poor approach to security (though arguably good for invention). It makes it harder to change things, but it _builds_ security over time.