Cyber security is like a game of cat and mouse, but one where the cat keeps changing form, so the pursued mouse is never certain of what it is defending against.