Cost of Cyber Offense Versus Defense

If you weren't already aware, adversaries cyber criminals have a thriving market that delivers all manner of malware, ransomware, DDoS and many other forms of Malevolence-as-a-Service.  The image below was scraped from a darkweb retail front selling 'booter' or 'stresser' DDoS-as-a-Service, just one of dozens active at this moment.  Unlimited 500Gbps+ attacks for less than $1,000/month, MUCH less expensive and complex than maintaining corresponding defenses.

I'm not sharing this to advertise for the bad guys, but rather to beg two questions:

1. Does it make sense to continue 'Doing What We've Always Done' when an adversary has clear asymmetric advantages (cheap, readily accessible and effective weapons)?

2. Does it make sense to grant your adversaries freedom of action to always bring attacks and conflict to your doorstep (the edge of your network)?

The short answer to both is clearly 'No'.

I encourage you to start the week by looking at InfoSec from a different angle, join us at Hoplite in gaining insights into relevant threats before they occur, move the fight from your doorstep and change adversary economy to your advantage.

https://hoplite.io