... of attempting to secure the user machines themselves, we propose the use of a portable “shrink‐wrapped” firewall (which we have called Sieve). This is a separate machine running an embedded system that includes firewall capabilities and is normally placed between the general purpose computer and the network...