An intruder attack can be labeled mild or serious. An intruder attack is labeled serious when an individual accesses confidential data, performs unauthorized modifications to data, or disrupts the system.

Confidentiality, integrity, and availability are three basic targets for network security. Confidentiality ensures that private information is not made available to unauthorized individuals. Data integrity ensures that modifications to data are only done in an authorized manner by authorized personnel. System integrity ensures that a system performs its intended function without disruption or manipulation. Availability assures that systems function properly and that authorized users are not denied access.

Activities for a network risk assessment include but are not limited to the following: Using the peer to peer network

• Identification and analysis of assets and processes related to the system
• Identification and analysis of threats that could affect the confidentiality, integrity, or availability of the system
• Identification and analysis of system vulnerabilities
• Identification and analysis of protection requirements to mitigate the risks