"Assume that well-funded attacker can penetrate almost any
"The question is “How long can these defensive measures
"RV may probabilistically approximate the work factor to
crack a system
native vulnerabilities are not actually exploitable
foo% of the time a well-funded attacker can’t get in that way
takes foo% longer to get in???