This is an attack on the ownership of information and intellectual property. Corruption of data. The attacker either destroys or corrupts data stored on disk or corrupts data as it is transmitted across the network. This is an attack on the integrity of information. Internal network connections such as routers and switches.
Interconnection points such as gateways between corporate intranets and the Internet.
Application-level imposters, eavesdroppers and attackers. Establishing adequate or even impenetrable security at one point of attack while leaving one or more of these other points uncovered is like posting a guard at the front desk and leaving the company s doors and windows wide open. An employee who seeks revenge or a serious thief will try every avenue of entry, particularly if the value of the information is great and the access is relatively easy. An enterprise may employ any or all of these elements to achieve integrity and access control. The best strategy depends on the risk involved, the cost of the deployment and the cost of a security breach or lost data.