Confusion regarding strategic defenses for network security