what to protect? how to parameterize the problem end systems routing infrastructure non-networking/non-hosts objectives (funky political stuff i don't get)