Playing cops and robbers with cybersecurity