The sort of sweeping parochial espionage and attempts to extract information from all sorts of institutions are well documented, but I think in this context there's a danger of oversimplifying and seeing that sector of cyber as a one-way street.

What we're going to get as this next generation grows up is more hacking skills and this is spreading geographically also - Africa is about to come on the scene, South and Central America are going to be major sources of hackers. These people have got to be engaged with.

The criminal justice system - although this applies less to the U.S., where rehabilitation is not seen as a valuable contribution to criminal justice - in Europe where rehab is supposed to be integral, we have no way of rehabilitating skilled hackers. On the contrary what we do is we demonize them and continue to do so after they come out of jail because we restrict their access to computers by law. Crazy world, crazy people.

There are two types of companies in the world: those that know they've been hacked, and those that don't.

You don’t have to sleep with prostitutes or take drugs in order to have a relationship with organized crime. They affect our bank accounts. They affect our communications, our pension funds. They even affect the food that we eat and our governments.

In 2010, you have roughly 38 billion dollars spent by government on cyber and telecoms security and another 60 billion or so by private corporations. So approximately 100 billion dollars spent on security, mostly on technological solutions, which the corporates are offering governments in particular; it's a very high growth area. So everyone is climbing over each other to get the contracts for government procurement on this. There is undoubtedly an element of this and that's what encourages, in part, the whole idea of locking down the Internet.

What has happened is that we have seen a shift in the past twenty years in the very concept of hacking. So hacking twenty years ago was a neutral, positive concept. Somebody who was a hacker was someone with advanced computer skills, which could expose vulnerabilities and could explain why systems worked well or worked badly and they were generally regarded as an asset. Over the past twenty years, a combination of media and law enforcement has changed the perception of the concept so that it has almost always, if not invariably, a pejorative sense attached.