1. A skeptical method, implemented by a processing system, of protecting an asset comprising: monitoring commands of a user; predicting a plan of the user based on the monitored commands; assessing a threat based on the predicted plan; and, selecting, from among a plurality of possible responses, a response that is appropriate to the assessed threat.