If there's to be government-induced security on the internet, I'd rather see it in terms of encouragement than regulation.

If, for example, antivirus software were tax-deductible, for both corporations and individuals, that would be better than some complex set of rules on whether your computer should be allowed to connect.

Set up a certification standard, allow private companies to create sites that will test your computer for compliance, and if you pass certification every month or every quarter or whatever, you get $1000 off your tax bill, or added to your refund. Companies like Symantec already have sites that will test this stuff for you.

Would almost certainly result in a lot more secure computers. Wouldn't get everyone, but nothing will.