Many Web sites exist that contain hundreds of computer attack tools, many are automated. Many attacks are so simple that typing a URL or address can launch them. Secure system administration skills and abilities are scarce. The ability to securely administer a network is a scarce skill that is not always understood or appreciated. The typical Federal systems administrator does not have the skills he or she needs.
Attackers have a natural advantage.
Attackers need only find one way into a system while the system administrator must find and block nearly all of the ways into their systems. Software exists that will automatically scan systems in order to find parts that are vulnerable. Software continues to contain vulnerabilities. Modern IT systems are extraordinarily complex and contain flaws that provide exploitable holes for attackers. Federal Web sites are high profile targets and in some ways are naturally vulnerable to attack.