The NSF/IARPA/NSA Workshop on the Science of Security was held November 17-18, 2008 in Berkeley, CA. This meeting brought together over 40 government and academic professionals from computer security and a wide variety of other relevant fields to consider the state of scientific research in computer security and to identify steps toward establishing a stronger scientific basis for computer system security.