Why Good Cyber Defense Rarely Stops Attackers