“

Databases of vulnerable critical national infrastructure will be traded in the future like the data of stolen credit card numbers today. When such data is processed, some nodes will still be visible and vulnerable, others will have already been compromised, and some will no longer be exposed online. The freshness of the data will be a factor in the price of such datasets, probably more so than the strict accuracy of the data it contains. The ability to rapidly act in an automated manner on such data by either defenders or attackers will define the next few years of critical infrastructure protection.