The top security administrator of a major U.S. city provides a list of the top five improvements he would like to see in public-sector IT security - including "virtualized" resources that will prevent user desktops from being converted into remote-controlled bots.