On the development of information security in the United States