How can we be sure that our security measures are actually doing what they're supposed to do? For example, firewalls were a popular choice this week -- how do we know that our firewall is keeping out all unwanted traffic? If someone had found a vulnerability in our firewall, how would we discover it?