Plus: How not to defend against cyberthreats