Enough defense: Is it time for an IT security offensive?