The Attacker Has the Advantage in Cyberspace. Can We Fix That?



It is not news that cyberspace is insecure. Attackers have had the advantage over defenders for not just years, but decades. Quotes from decades ago make it clear that cyber defenders then faced the same challenges we do today (and with a similar lack of success).
When was the last presentation you heard that had anything as smart as the following?
“The system designer must be aware of the points of vulnerability, which may be thought of as leakage points, and he must provide adequate mechanisms to counteract both accidental and deliberate events. The specific leakage points include physical surroundings, hardware, software, communication links, and organizational (personnel and procedures).