Cyber Security follows the same rules that science does. Cyber Security can use the scientific method in order to solve a problem whether it is an ongoing attack or building a plan in order to stop future attacks. For example, when creating a new defense system, the person creating the system would collect data from past attacks or find new ways to be attacked. Then they would come up with a hypothesis in order come up with an idea on what would work. After the hypothesis they would begin testing simulations in order to test their hypothesis. Finally you would take the results and come up with a conclusion on what would work for the future attacks.