Prevention
Firewalls, encryption, ...
Policies
Users need some services
Violation of policy == attack (?)
"Active security"
Detecting attacks
Response mechanisms