Cyber attack complexity increases as difficulties and cost to break-in decreases