attackers only need to be right once
expressionsecurity
The defender's dilemma: attackers can fail repeatedly at no cost, while defense must hold everywhere, always.
True as economics, and worth the modern counterpoint: a defender only needs to detect once, and an intruder must stay invisible through every step of a long kill chain. Assume-breach thinking exists to turn that second asymmetry into practice.
Also known as: defender's dilemma