First and foremost, thanks are due to my advisor, Brian Levine, whose years of guidance, support, and friendship made this dissertation possible. I would also like to thank the members of my committee, Mark Corner, David Jensen, and Dennis Goeckel, for their advice and feedback. I owe David a particular debt of gratitude for helping me realize the benefits of an structured, empirical approach to security. Thanks go to past and present members of the PRISMS group, and especially to George Bissias, Boris Margolin, and Matthew Wright, without whom some of the ideas in this dissertation would never have been developed. Matt’s encouragement was much-needed toward the end of the writing process. I also wish to thank my friends and family for thei...