Not long ago, cybersecurity professionals focused on defending organizations’ perimeters. If you could build a good enough moat, the thinking went, invaders would not be able to invade your castle.