Understanding the "attacker mindset" in security | CBTS