For years, cyber security strategy has been built around a simple premise, that attackers and defenders operate at roughly the same speed. But that assumption is now broken and new approaches are needed.