How should investors make money in a low-volatility, low-volume market? The answer may be taking defensive measures.