This post grows out of the current thread on Hiring Hackers as Security Consultants, but deserves separate treatment.

Does it take more skill to attack a network or defend a network? or is it about even?

Also, to what extent do attacker and defender share the same skillset and to what extent is it different?