Richard Bejtlich: “Offense informing defense” is a great idea, but there isn’t anything revolutionary about it. It’s really just one step above the previous pervasive mindset for digital security, namely identifying vulnerabilities. A good Red Team can exploit a target using methods known to the Red Team. This assumes a sufficiently mature, resourced, and capable set of security teams. In 3-5 years the mindset of the information security community will have evolved to where it needed to be ten years ago.”]
Source: https://taosecurity.blogspot.com/2009/06/offense-and-defense-inform-each-other.html