Security software priorities shift from defence to detection and response