Protecting against terrorist attacks requires making decisions in a world in which attack probabilities are largely unknown. The potential for very large losses encourages a conservative perspective, in particular toward decisions that are robust. But robustness, in the sense of assurance...