Software security alone is not enough to protect today’s networked devices and fielded systems. What is needed is a combination of software and hardware security.