Further, the next generation of terrorists will grow up in a digital world, with ever more powerful and easy-to-use hacking tools at their disposal.

Although cyber attacks have caused billions of dollars in damage and affected the lives of millions, few if any can be characterised as acts of terrorism.

I favor strategies that encourage industry to include some sort of key recovery capability in their systems which would also address user requirements for access.

I think most organizations have an interest in key recovery, at least with respect to stored data.

Generally I'm against regulation.

However, leaving everything to the market is not necessarily good for society.

If we take as given that critical infrastructures are vulnerable to a cyber terrorist attack, then the question becomes whether there are actors with the capability and motivation to carry out such an operation.