There is the area we are concerned about protecting. There is the area criminals profit from compromising. The action lies at the center of the Venn. A good defense raises the criminal's costs and/or cuts their profits, disproportionately to our costs to implement and maintain. Want an example? Take blocking IP scanners.