Ethical hacking, says Victor Gevers, helps organizations make low-cost, high-impact changes that improve cyber-defense.