Fighting cyber crime in the US has made us ill-prepared to fight a cyber war. This may seem to be hyperbole, but it is most definitely not. Cyber crime has been a recognized issue for 35 years and has consumed much of our time and energy for (at least) the last 10. In response to the cyber crime threat, we have seen the passage of a HIPAA compliance mandate (April 2003), SOX (July 2002), and breach notification laws in 46 US states. We have seen the establishment of a plethora of information assurance programs in academia.