The unusual on-screen event that a crew member reports to the system administrator may be the first clue that a system has been attacked. Similarly, a well-trained, proactive system administrator, intimately familiar with his system, is the cornerstone of the command's successful program. The most common misperception from computer users is that they think computer incidents are obvious, but they are not because computer hackers normally do not want their attack discovered. Consequently, it is not often a situation where the screen melts and the computer crashes. Because of the subtleties involved, a system administrator carrying out his normal duties will usually be the one who discovers an attack.
Training is the most important pillar in providing network security.
From the external standpoint, a firewall can help protect a system from hackers and prevent unauthorized intrusions, but with new products and hardware being introduced daily, opportunities and vulnerabilities to crack computer security will reoccur constantly. Networks are especially vulnerable to problems from within, and education and training can be the most cost-effective way to stop insider abuse. Just as in protecting the ship from traditional threats, even the junior crew members need to understand their roles in protecting the ship from cyber attack. Getting people trained to benefit from the new technology, I consider that the big challenge. The best line of defenseagainst information warfare are educated and trained people.