Greg and Bill talk some cybersecurity history about the Orange Book, and how fundamentally the approach to what we put security into has changed.  Big IT vendors have trouble with security because it isn't their core business.