There are many reasons for this  including the inherent advantage of offense over defense in the cyber game  the poor implementation of basic security practices in enterprises and the growing sophistication and professionalization of cyber crime