routers. need for modification. honeypots: production systems ( e. find new threats. using a network of systems called honeypots. . database servers) designed to do real work but to be watched and studied as network intrusions occur. find advances in technology and locate which new business assets needs securing.security risk management  honeynet: is a way to evaluate vulnerability of an organization by studying the types of attack to which a site is subjected.g.  implementation: involves the choose and use of particular technologies to counter the high--priority threats.   planning: the aim here is to arrive at a set policies defining which planning: threats are tolerable and which aren¶t and what is to be done in both cases.  a tolerable threat is one with a very high cost of safeguarding or the risk too low. high monitoring: ongoing process to determine successful or unsuccessful measures. firewalls. web servers.