What’s your problem?

To Solve a problem, first figure out what problem you’re solving.

If you have a problem that centers around how to get something done fast and efficiently…note that speed is the essence of your problem.  Probably, speed trumps correctness, repeatability, and documentation.  So…do it fast.   The problem you’re solving demands you do it fast.

If you have a problem that centers around solving the same problem repeatedly, then recognize that repetition is the essence of yoru problem.  Don’t build a solution designed to be fast.  Build a solution where repeatability is the essence.

One of the major problems in modern software process is that no one is willing to admit what the central problem is that their process is designed to solve.   Hero is designed to solve small problems.  Commander is designed to solve problems of how to coordinate lots of people.   Agile is designed to solve problems around change.

What’s your problem?   If you can figure that out…you might be able to decide how to solve it.

Complexity, Simplified

With additional attention comes additional clarity.

Complexity is the core question, as discussed recently.  But what are the choices?   Turns out there are three basic answers.  One I already discussed, but the other two are better understood in a different way.

How complex is your system?

Is it a simple system?  Handle things with simple answers.  Individual experts, working largely independently, with bucket lists and goal targeting.

Is it a stable system?  Handle things with stability reinforcing answers.  Plan your projects. Manage to the plan.  Work by schedule.  Define processes and tasks.

But what if it’s a changing system?   Then handle things with answers that leverage change. You can’t manage the group, you need to rely on natural social systems (tribes).   You can’t guide with plans, you must use feedback.  You can’t schedule, you have to prioritize.   You can’t define processes and tasks, you have to build ceremonies.

Simple, Stable, or Changing?  That’s your question.  Use the right system for the right problem.

Complexity

We’ve run through a couple models of analysis on the nature of Agile/fluid systems.  Specifically, we’ve looked at that Method Grid, and then recently, we were trying to address which question needed asked.  I think we’ve made a breakthrough in our analysis.

Question:  Why is it that Hero and Director are more natural states than Messiah and Wedding Planner?

It seems as if there’s some natural synchronicity between Independent work and Individual responsibility, and also a natural synchronicity between planning and management.

Perhaps calling them out as separate axes is not the right thing to do…maybe there’s a deeper, underlying question, which is being answered in the same way on different axes that leads to this synchronicity.  And once we looked, we did indeed find that to be true.

The new claim:   There is one question at the heart of Agile.  The Agile manifesto gropes blindly for the question, but seems clearly to be looking for it.  The fluid principles are each a manifestation of the Agile question, in a different domain.  What is the question?

Q:  How do you handle complexity?

And at that same deep level, there are three basic paradigmatic responses.

Paradigm 1:  Simplicity.
A:  We don’t.  Our problem isn’t that complex.
Why do startups run in a profoundly different fashion than large companies?  Because their problems aren’t big enough yet.  They’re applying simple solutions (frequently from a brilliant insight) to simple problems.  In applying simple solutions to simple problems, they don’t address complexity at all.  And that’s wonderful.  For the domains that it works in.

Paradigm 2:  Control.  (aka Mechanical, Resisting, Rigid, Structured, Design, Managed)
A:  In the face of complexity, we attempt to control it.
Once problems become difficult enough, the Simplicity paradigm is insufficient to handle the problem.  We design a complexity management system.  More than a couple dozen people in an organization, and the group dynamics need management.  More than a couple dozen modules in your code, and you need to start doing design.  More than a couple dozen weeks in your project, and you need to lay out a plan.  More than a couple priorities, and you need a schedule.  More than a couple risks, and you need a process.   Everyone knows this system, as every large business we’ve seen has followed this mode.

Paradigm 3:  Fluid (aka Biological, Accepting, Organic, Nudge)
A:  In the face of complexity, we travel with it.
At some point after problems become difficult enough that the Simplicity paradigm is insufficient to handle the problem, so too is the Control paradigm unable to handle the complexity of the system.  Nature is complex enough we cannot direct it.  Rather, we need to work with nature, rather than against it.  In the southwest USA, build from brick and adobe to handle the heat.  In California, build flexible, wooden structures to handle the earthquakes.  In Galveston, build on stilts, to handle the Surges.  Nature will not be commanded…but in flowing with nature, we can get some of what we want.

In the face of hundreds of people in an organization, we need to abolish the formal organizational structure that fights nature, and instead allow natural social systems to emerge.  Tribes sit at the 150-person level.  Hunting parties are near 10.  Pairs work together naturally as well.  Natural social systems don’t sit well with authority.

In the face of thousands of components in a system, and fluid requirements, we need to abandon the notion that a design will capture what we need.  Rather, we need test-driven design and an aggressively maintainable system in order to build good enough architectures to survive the natural change cycle.

In the face of hundreds of competing priorities, we need to abolish the formal method of scheduling, and focus instead.  Biological systems like human beings and human organizations have limited bandwidth.  Scheduling 6 things at once doesn’t get 6 things done faster.  Rather, it usually means that at least 5 things get done slower than they would have,  and usually aggressive prioritization/queuing/focus gets 9 things done faster than 6 things in a scheduled fashion.

In the face of innumerable risks, process cannot save us.  We need a better answer.  A natural, flowing with human patterns instead of against them answer.  The answer that gets us there is ceremony.

In the face of more than a couple encounters with changing reality, planning systems crumble under the weight of replanning.  Instead, we need fluid, biological responses to changing conditions.  We need the ur-mechanism for responding to reality.  Feedback systems are the only answer.

There is only one question:

How complex is your problem?

If you have easy problems, a simple paradigm can solve them.
For mildly difficult problems, the control paradigm is standard because it handles them.
But for the actually hard problems, fluid systems are the only answer.

It’s interesting also to consider how many problems fall into the moderately difficult category…and how much overlap there is between the problem-solving capacity of control vs. fluid systems?  How many problems can control solve (well) that fluid can’t?

The answer is no. Wrong question.

As our understanding of Fluid approaches improves, we’ve come to see more and more that it isn’t just the answers to traditional questions that are wrong, but rather it’s almost always the wrong question being asked as well.  And when you ask the wrong question, the right answer is nearly impossible.  It’s as if we’re discussing wealth with a mathophobe and they ask us the question, “If I want to get rich, what should I do with my life savings?  Should I go to Vegas, should I play the lottery, or should I invest in high volatility derivatives?”

The answer is no.  Wrong question.  You get rich by investing other people’s money.  And  you don’t do it in the lottery, vegas, or bankruptcy-immune derivatives.  Now…I’m not exactly rich, so I don’t have enough to say here…but I can tell you with confidence that with the question being so wrong…the answer can’t be right.

And so it goes with decisions in the business world.  Almost every question you’re asked will be the wrong question.  Which of course makes the answers insane.

What questions do we need to fix?

How can we get the right answer to our questions?  Should we rely on experts, or should we rely on careful planning?

No.  Wrong question.  The right question is:

How do we find out where we’re wrong faster?

Feedback systems.

————-

How do we assign responsibility to  individuals to get work done?  Responsibility to the individual, or responsibility to the manager?

No.  Wrong question.  The right question is:

How do we assign responsibilty to groups?   

You build a tribe.

————

How do we determine what is important?  Should we work in an interrupt driven (scheduled) system, or should we build bucket lists?

No.  Wrong question.  The right question is:

How do we determine what to do first/next?

Work from a queue.

——————

What existing business feature should we trust to bring us good results?  Should we trust the individuals and relationships?  Or should we trust our metrics?

No.  Wrong question.  The right question is:

What system should we build that we can trust?

Ceremony.

———————

The old questions are the wrong questions.  The old answers are nuts.

The new questions, with answers:

 

How do we handle error?  Feedback

What gets responsibility?  Tribe.

What do we work on?  Queues.

What can we trust?  Ceremony.

 

Finally, some good questions.

 

Listening isn’t Learning

The theory of using Ritalin in schools goes like this:

  1. Grades measure learning.
  2. Sitting still and listening is an important part of learning
  3. ADHD prevents kids from sitting still and listening.
  4. Ritalin allows ADHD kids to sit still and listen.

Therefore:

  • Ritalin will help ADHD kids get good grades.

The problem is that the conclusion is false.  Recently, scientists figured out that Ritalin is not actually effective at improving grades.

Why is this? Ritalin supports the standard schooling model very well. If students can’t sit still and listen, what should we do? Ritalin is a very simple answer: Give them a drug that allows them to sit still and listen.

What can explain then, the failure of Ritalin to improve the grades of the students? There are several explanations available, but few of them look especially good for the standard learning model, and none of them look good for the use of Ritalin.

If we have a syllogism with 4 premises and a conclusion, and the conclusion turns out to be false, then so too must one of the premises be false.

For the purposes of this discussion, I think that we don’t need to worry much about premise one’s truth.  It is also pretty well established that ADHD prevents kids from sitting still and listening, and that Ritalin allows ADHD kids to sit still and listen.  That leaves only one premise to address*, which is almost certainly wrong:

  1.  Sitting still and listening is an important part of learning

But, someone might object, this is a foundation of our entire school system, and most of our training in the corporate world.  Indeed it is.  And that’s a pretty big problem.

Let us suggest instead a different model of learning.

There are three domains which we interact with in our learning process:

  • The Territory — The real world
  • The Map — Our mental representation of the real world — usually not in words
  • The Words — What we use to communicate about the world.

Or, because I’m suggesting that the listening/reading thing isn’t good enough, let’s get a picture:

The original tree is the territory.**  What someone sees looking at the world.  That is translated via some process into some sort of mental map of a tree for the original observer.  Then, the original observer communicates something about what he’s understood to a listener “Tree”.  Then, if all the stars are aligned, the listener builds his or her own mental map of what was communicated.

 

The problem is that this system is designed to communicate mostly old stuff.  It kinda sucks for communicating novelty.  And the learning process is about the communication of information and methods that are new to the listener.  Somewhere between the business of translating from the map into words and the business of translating from words back into a map, there is usually a failure.

While this in itself would be sufficient to explain the failure of Ritalin, we can take it further.

An awful lot of the time, this is not a picture of what’s happened.  It’s more like this:

There’s usually an intermediary between the discoverer and the listener.  Oftentimes the intermediary doesn’t even do the real translation from map to words.  Rather, they encode the words.   And that’s where we get real problems.

Human beings have the capability to encode words.  They also have the ability to build maps.  But basically people can’t build good maps from words.  And you can’t do anything with your words except repeat them until you have a map.  Unfortunately, 20 years in teaching, and nearly that many more in school says that the business of going from words to map is effectively non-existent.

Ticking upwards to close:   What can we do about it?  As educators, we can focus heavily on what a student can do rather than what words they can say.  As Agilists, we can keep our meetings small and participatory.  Anyone not talking is out if it’s more than 10 minutes.  And as learners, we can focus on our ability to really understand by doing, rather than keeping a set of words in our heads.

 

* It could also be true that Ritalin prevents learning another fashion, independent of sitting still and listening.

** Yes, the whole diagram constitutes something sitting somewhere between words and map.  It’s clearly not words, but it’s an attempt to communicate my map to you.

 

Introversion, Extroversion, and Shyness

It is really exciting what science is discovering about our brains and what it means for how we get along with each other in the world. For example, consider introversion and extroversion.

We all used to think that extroversion meant you got your energy from being around people and introversion meant you got your energy from being alone. That turns out to be a simplistic way to describe it.

Here are new descriptions of introversion and extroversion based on current scientific research captured succinctly in this article from Benzinger titled “The Physiology of Type: Introversion and Extroversion”:

Our arousal level identifies the amount and speed of our brain’s activity. …

Extraversion
Having a naturally low level of arousal which causes the individual to seek higher than normal levels of stimulation in order to “feel alive.”

Typical ways in which the extravert seeks stimulation include: trying to influence or control his or her environment; confronting others; engaging in competition; attending crowded parties or events “where the action is.”

Introversion
Having a naturally high level of arousal which causes the individual to seek lower than normal levels of stimulation in order to not feel overwhelmed.

Over a period of years, this need to not be overwhelmed by external stimulation develops into an internally focused thinking style which may seem withdrawn, meditative, quiet, or even reclusive to more extraverted person. Typical ways in which the introvert seeks to control the level of stimulation include: spending time reading, reflecting, or otherwise alone; avoiding or being accommodating to others; competing mostly with oneself or self image; going to small parties or out of the way places.

An obvious way for a person to get more external stimulation is to be around a lot of people. That is where we get the idea that an extrovert needs to be around other people and an introvert wants to be alone. But other ways of increasing external stimulation include multi-tasking, playing music while doing other things, or engaging others in debate or argument.

So if extroverts want to increase external stimulation, then they should like multi-tasking, playing music at work, and being argumentative. And if introverts want to decrease external stimulation, then they should hate multi-tasking, playing music at work, and being argumentative. These statements both turn out to be true.

Now what about shyness. Shyness (or the lack of it) just refers to a person’s comfortableness with other people, particularly with strangers. A person who is shy is very uncomfortable around strangers; in the extreme case, a shy person literally cannot talk with strangers. On the other end of the scale is the gregarious person who enjoys chatting with complete strangers; in the extreme case, the gregarious person looks for people to chat with everywhere.

So now think about shyness and type. There are four combinations:

  • The shy introvert
  • The gregarious introvert
  • The shy extrovert
  • The gregarious extrovert

Obviously shyness is compatible with introversion. One way to reduce external stimulation is to not be around people. And gregariousness is compatible with extroversion. One way to increase external stimulation is to be around a lot of other people. Those folks have it easy.

The challenges are for the gregarious introvert and the shy extrovert. And yes they exist. I personally know people in both those categories.

The gregarious introvert after spending time chatting with people all day at the office will need time alone in a quiet place to recover balance. A gregarious introvert may turn to alcohol (a depressant) to reduce the level of stimulation to manageable levels. Maybe you know someone who just needs that glass of wine or martini after a day at the office. Maybe the custom in your house is for the wife to take the kids off to make them dinner, while the husband sits quietly in his chair in the dark with a drink for an hour before he can face the family. This is the gregarious introvert balancing the stimulation levels so he can feel functional.

The shy extrovert after working from home alone all day feels dead and needs stimulation to get their energy levels up to a point where they feel functional. A shy extrovert may do a lot of multitasking to reduce the boredom of lack of external stimulation, or play action packed computer games.  Maybe you know someone who works from home who really comes alive when the kids get off school and they go play. Maybe the custom in your house is to take the kids out to the park to play before everyone settles down to dinner and homework. A shy extrovert may put on loud music and the TV and start dancing around the house to get energy levels up. Or propose going out to dinner. Or tease the dog, cat, or children into boisterous play.  This is the shy extrovert balancing the stimulation levels so he can feel functional.

Since Agile focuses a lot on teamwork, it is useful to know what drives different people to behave the way they do. These compensating behaviors become more pronounced in periods of high stress, so if you are pushing your team to a deadline, and some people withdraw and others start picking arguments, you can be sure they are adjusting to their own needs for reduced or increased stimulation in that high stress environment. Give the people who are withdrawing a quite place to get away for a while. Send the argumentative people to a game room with lots of games, music, and TV to play in for a while. Use what we know about the brain to make it easier for people to do their best work for you.

The Method Grid

Hero is one of several methods we have of solving problems.  And, as you can tell, gentle reader, it’s not a particularly Agile method of solving problems.  Indeed, the term was originally coined in order to be used as a foil to carefully differentiate between a few standard problem-solving methods.

However, in our exploration, we discovered a few more methods, and discovered that you could categorize them neatly.  Let’s begin with hero.  When we explored the characteristics of a heroic approach, we identified two factors as being the primary signifiers.

First, hero is about independent actors, each doing what they do well.  Perhaps they’re in a group, and perhaps not, but they remain independent.  Dirty Harry and John McClane (Die Hard) are iconic individual movie heroes.  The more recent Avengers movie show us a group heroic effort.  Each hero does his or her own thing, brilliantly, and independently (except for a few touching scenes in which they help one another for a few seconds).  But the independence is central to the heroics.  Each participant helps, but they each work solo.

Second, we might call out that the heroic approach relies on expert intuition to solve problems.  Each participant is required to be expert in order to solve the problem.  And it is by virtue of their expertise that the problem gets solved.  In the case of the two cop-hero movies, it is their grit, determination, individual excellence, and their long careers as cops that make them succeed.  In the Avengers movie, it’s their individual superpowers (a very impressive form of expertise).

If we were drawing a diagram, we might see hero sitting at the intersection of independent and intuition:

Optimizing / Grouping Independent
IntuitiON Hero

With hero as the first method, the second method we named is now generally referred to as Director.  Director is modeled after the approach of any legendary movie director.  Steven Speilburg is among the best of the modern examples.  How does Spielburg develop a movie?  He does it very differently than a hero would, both on the grouping axis and on the optimizing axis.

On the optimizing axis, Spielburg makes a plan.  Not only does he make a plan, he takes years to make a plan.  Get a thousand scripts.  Read them all.  Throw them all away, except the best two.  Rewrite/improve those scripts 30 times each.  Pick the better of the two.  Rewrite it another 30 times.  Nail down every shot location, every line, and every look in the movie.  And then?  Hire some actors to make it work.  Spielburg is a planner.  A darn good planner, but his fundamental method for excellence is nonetheless to plan exceptionally well.

On the grouping axis, Speilburg manages his group.   Not only does he have a plan, and share his plan with the team, but when the team doesn’t follow his plan to the tee, he cajoles sometimes, yells sometimes, fires someone even sometimes, and then gets back to the business of managing the details of all 7000 participants in the movie-making process.

A director, to be successful, plans and manages his team.  A heroic group operates with intuition and independence.  These are hugely different.  Putting these two into the grid, we now have this:

Optimizing / Grouping Independent Managed
IntuitiON Hero
PlannING Director

Once we see this relationship, it becomes pretty easy to fill in the other two quadrants.  Intuitive-Managed is Supernanny or Gordon Ramsay or any other Managing Expert approach, including essentially all management consulting.

Planned independent is a lone caterer, prepping a meal for 500.  Alternately, an individual carefully planning his or her stops on a cross-country driving vacation.

Our graph has grown

OPTIMIZING / GROUPING INDEPENDENT MANAGED
INTUITIon Hero Supernanny
PLANNING Caterer Director

This exhausts most normal methods for solving problems.  However, we assert there are more, and that they fit nicely into our grid.

Let’s take another method, and see if we can place it.

The notion of a high-performing team (HPT) has been discussed in management literature for the last 60 years.  What are the characteristics?  The three primaries are group-decision-making, and highly competent individuals who flow into one another’s roles as needed.  Rather clearly, they optimize their decisions based on intuition and expertise, but they organize in a completely different fashion from the independent and managed groups.    The simplest way to describe their method of organization is tribal.  The team forms a common bond with a common purpose, and in a very egalitarian fashion (while recognizing individual expertise) moves towards a solution as a tribe.

This expands the grid to look like this:

OPTIMIZING / GROUPING INDEPENDENT MANAGED TRIBAL
INTUITION Hero Supernanny HPT
PLANNING Caterer Director

But wait, there’s more (It’s not sold in any store).   We know of another method for solving problems besides intuition and planning.  What does a scientist do?  A scientist proposes a hypothesis, and then runs an experiment to determine if (s)he is right or not.  Rather than planning a correct result, or relying on years of expertise and the hard-won intuition, a scientist gets to the truth via feedback.  Michaelson-Morley figured they’d measure the directional flow of the ether.  Turns out that they couldn’t find one.  Indeed, that experiment in which they attempted to measure something turned into one of the foundations of Einstein’s theory of relativity.  Run an experiment.  Measure the results.  Decide what to test next.  Run another experiment.  Eventually we converge upon the truth, but we get there only via feedback systems.   Expert intuition, or even perfect planning are simply insufficient.

Moore’s Law

Note: I am posting this in the off chance you haven’t read something like it before.

Gordon Moore1 observed in 1965 that the surface area of a transistor was being reduced by 50% each year. The press called this observation Moore’s Law. It is especially significant to us because the transistor is the fundamental building block of computation technology, the integrated circuit.

He predicted in 1975 that, for the foreseeable future, computer chip density would double every two years and with it computer power. At the same time, Moore observed that the cost to manufacture the computer chips was remaining relatively constant. If you bought your first new microcomputer in 1975, according to Moore’s Law you have observed the following: 

1977 – New computers are 2 times faster than mine in 1975
1979 – New computers are 4 times faster than mine in 1975
1981 – New computers are 8 times faster than mine in 1975
1983 – New computers are 16 times faster than mine in 1975
1985 – New computers are 32 times faster than mine in 1975
1987 – New computers are 64 times faster than mine in 1975
1989 – New computers are 128 times faster than mine in 1975
1991 – New computers are 256 times faster than mine in 1975
1993 – New computers are 512 times faster than mine in 1975
1995 – New computers are 1024 times faster than mine in 1975
1997 – New computers are 2048 times faster than mine in 1975
1999 – New computers are 4096 times faster than mine in 1975
2001 – New computers are 8192 times faster than mine in 1975
2003 – New computers are 16,000 times faster than mine in 1975
2005 – New computers are 32,000 times faster than mine in 1975
2007 – New computers are 64,000 times faster than mine in 1975
2009 – New computers are 128,000 times faster than mine in 1975
2011 – New computers are 256,000 times faster than mine in 1975
2013 – New computers are 512,000 times faster than mine in 1975

Do you have enough computational power to solve your business problems yet? 

Practically speaking, Moore’s Law has been in operation throughout the entire careers of most people in the software development industry. Our computer hardware is threatened with obsolescence every few years.

You can also think of Moore’s Law another way. In 1975 you would have paid $67,000 for computational ability you can buy today for a few cents. In the world of computers the golden triangle of faster, smaller, and cheaper is actually true.

Moore’s Law impacts us in ways we often don’t first realize. For example, answer the following question: How many computers do you own? Before you jump to a quick answer think for a moment. How many computers are in your car? In your home? In your kitchen alone (the microwave, stove, refrigerator, toaster oven, etc. all likely have computers inside)?  How many computers are you carrying on you right now?

Moore’s law affects a lot more than just the “personal computer.” It has created a demand for customized computers and software for just about every electronic device imaginable; more devices, more computers, more software, more complexity in the technology that runs our society.

 Are you developing software to run on your customers’ current computers? How many changes of operating systems and hardware should your software be designed to survive?  What will it look like in the new iPad, on a larger cell phone, in Google Glass?

To survive in this environment you need to make and continually revisit strategic business decisions including which new technology to adopt, how much and when. Yesterday’s answers may not be at all appropriate today for the simple reason that you can no longer even acquire yesterday’s technology. This is a game you cannot get out of, some of us have tried. 

1 Dr. Gordon Moore co-founded Intel Corporation in 1968 and served as CEO from 1979 to 1987.

Moore, Metcalfe, and Disruptive Technology

Context matters. The context for developing software products is a hyper-accelerated society. Technology advances at an ever accelerating rate and business is a direct beneficiary, and sometimes casualty.  The world has seen more technological innovations in the past 50 years than in all the years of previous human history combined. And there is no sign that the rate of change is letting up. In my lifetime, I’ve watched our society embrace and adopt the following significant new technologies in an increasing accelerated pace:

    • Tablet Computers: 3.5 years to adoption by ¼ of U.S. population
    •  
    • The Internet Browser: 7 years to adoption by ¼ of U.S. population

 

  • Cellular Telephones: 14 years to adoption by ¼ of U.S. population
  • Personal Computers: 16 years to adoption by ¼ of U.S. population

Do you see the trend? It is important to understand the context of the society we find ourselves in, an accelerated society. The following three principles help capture the this context:

  • Moore’s Law
  • Metcalfe’s Useful Equation
  • Disruptive vs. Sustaining Technology

I will post on them separately, or if you are impatient you can Google them yourself. If you are going to do agile development, these are worth studying and understanding.

Security Crisis

The Department of Homeland Security, U.S. Cert, and other private organization continue to raise concerns about the significant vulnerabilities that exist in U.S. Information Technology (IT) infrastructure (e.g. computers, operating systems, phones, software, servers, databases, and networks).

Our economy has become significantly dependent on our IT infrastructure to conduct almost all business and this trend continues to expand. Unfortunately, there is reason to believe that a highly coordinated and sophisticated attempt to disrupt the operations of this infrastructure could succeed. Clearly, our networks and computers are vulnerable to attacks where even unsophisticated high schools students can inflict more economic costs than a Florida hurricane.

Attacks come in many forms. Hacking is where a user gains direct control over a computer, usually by thwarting the log-in and firewall mechanisms. Viruses are self replicating code fragments that infect computers automatically. Trojan horses are social tricks, where the user is tricked into executing hostile code by appearing to be something else.

The current responses to these security threats is a reactive one, typified by updating virus software and downloading various application and operating system software patches. The weakness with a reactive response is that it typically occurs only after an attack has been successful. It takes time to identify new attacks, it takes time to update the virus filters and security holes in the operating systems and other software, and it takes time to distribute these new updates to all of the computers on the network. During all of this time, significant damage is occurring to the economy.

The reactive response does provide increased security but at great risk. Reactive responses require that the filters be continually updated, and because each new attack requires a customized response, even hundreds of people can’t properly keep up with all of the attacks. These reactive programs, in an attempt to combat the attacks, continue to grow in complexity and size causing a signification reduction in machine performance, plus they tend to introduce new defects and more vulnerabilities, and negatively impact worker productivity.

We have been fortunate that no enemy has really released a truly morphing virus, which continually changes form and method of attack. Such a virus resists all standard filter attempts. We have been fortunate that no enemy has tried more subtle attacks; such as changing just a few of the numbers in every spreadsheet on a machine and then deleting itself. These types of attacks could bring a halt to the information economy as companies spend trillions of dollars trying to sort out good data from compromised data.

So, what conditions have most led to our current crisis of vulnerability? Interestingly enough it is our historic strengths in mass production and uniformity that cause these vulnerabilities. Currently, all of our machines are fundamentally the same. If you can successfully infect one machine you can successfully infect most of the machines. Hundreds of millions of machines in government, business, and private homes all have the same software installed, the exact same version, they look exactly alike. If you break one machine, you have successfully broken a hundred million machines.

Note, these vulnerabilities are almost impossible to eliminate simply by better programming.

We need a new solution. A solution that takes the hundreds of millions of existing machines that all are exactly alike and makes them all dramatically different—automatically. We need a proactive active strategy to protect against infection, before a new attack is even conceived. A proactive solution does not wait to see how computers are compromised and then add a new filter to stop that attack. Instead, the system leverage the best of encryption, advanced pattern detection, and proprietary polymorphic behavior (i.e. continually changing forms) to insure that a virus, hacker, or Trojan has no place to go.

A proactive solution continues to work even if a machine in successfully attacked, that machine automatically identifies the attack and actively attempts to remove it and restore operations.

A proactive security world has all of the machines expressing in different forms. If any individual machine is compromised, it is highly unlikely that that technique can be used to attack any other machine. A system acting more like a human body, responding automatically to infection by changing its defensive forms until the hostile code can no longer survive. Our machines must actively fight infection.

This will only be accomplished by taking a fundamentally different approach to the problem. We must leveraging the power of the processors already in the computer to full advantage as security processors. Security must become a fundamental property of the machine, not an afterthought downloaded from a virus software vendor. No virus updates and search patterns to download. No large teams attempting to respond to the latest attack. No single points of failure.

In a way, the machine is becoming more self-aware. Using the resources of the computer and the processors to build, monitor, and continually change defenses on that machine that are totally unique to that machine. In this way, almost all of the security holes and vulnerabilities that currently exist in our IT infrastructure can be closed.

Of course, these technique must run quickly and compactly and not require a lot of additional resources. The techniques must scale both up and down the spectrum, allowing for a style of security to be applied to all computational devices from mainframes, to servers, to desktops, to laptop computers, to hand-held devices and cell phones.

Our economy has become too dependent on IT infrastructure to allow security to be handled haphazardly.

It is time for drastic change.