There are few solid pieces of empirical evidence on what works in security. The Australian Defense Signals Directorate (DSD) Strategies...