Rand Corp. on zero day exploits