This concept comes from the military. Traditionally, the red team was the pretend enemy in military exercises. The cybersecurity community has generalized the term to mean a group of people trained to think like the enemy and find vulnerabilities in systems. This broader definition has been incorporated into military planning, and is now part of the military’s strategic thinking and systems design.

