The defender can preemptively allocate information-gathering resources to reduce uncertainty about the attacker's costs and intentions, and then optimally allocate defensive resources given the acquired information.
