Cisco on "why in practice end-to-end !security alone is not sufficient, and why network-based security is also required": http://status.hackerposse.com/url/4230