Secure by default : a behavioral approach to cyber security