The Myth of the Adversary Advantage

The report argues that defenders possess inherent advantages in cyber engagements and should focus on robust network architecture—segmentation, visibility, choke points, and sound traffic directionality—rather than relying primarily on vulnerability patching; practical design and containment reduce the effectiveness of even severe exploits, as illustrated by Conficker (MS08-067) and EternalBlue (MS17-010).