attackers only need to be right once

expression

security

The defender's dilemma: attackers can fail repeatedly at no cost, while defense must hold everywhere, always.

True as economics, and worth the modern counterpoint: a defender only needs to detect once, and an intruder must stay invisible through every step of a long kill chain. Assume-breach thinking exists to turn that second asymmetry into practice.

Also known as: defender's dilemma

All glossary entries