There has been an awakening that online threats are real and growing worse, and that the prevailing “patch and pray” approach to computer security will not do.