An attack can damage data integrity, confidentiality or availability. While more security equals more cost, the cost is slight compared to a single breakdown of services. Email can be intercepted or spoofed. In Email spoofing an attacker assumes a false identity to solicit information or access. Hackers also exploit root compromises on old systems, poor passwords, IP spoofing, misconfigured networks, and packet sniffers.
Internet security starts with proper administrative and physical security.
Firewalls and bastion hosts should be employed where necessary. Administrators should monitor and log all activity. System administrators should stay current on system vulnerabilities and controls. Internet risk assessment must address a myriad of specific Internet threats. By running a risk assessment workshop an organization can determine security needs and develop a security strategy that covers both personnel and technology issues.