Top-down cyber defense is an upside-down approach