Measuring the Attack/Defense Balance

A brief post highlights a Lawfare analysis by Jason Healey and Tarang Jain that introduces a framework to measure the attack/defense balance using trend-focused metrics across threat, vulnerability, and consequence, leveraging existing datasets from major firms and agencies. Early results suggest improvements in threat operations, the threat ecosystem, and software vulnerabilities, but little change in consequences, with the project moving forward to expand a catalog of indicators and encourage time-series reporting.