Ten to fifteen years ago, the security threats to information systems were primarily mischievous in nature. Malicious elements focused on defacing web sites and hacking into computers as a demonstration of technical skill. The most damaging malware of the previous decade was simply destructive in nature, deleting data or denying service. Modern malware is much more insidious, seeking to compromise systems and stealthily steal valuable information. Modern security threats are primarily an organized criminal activity that is focused on making money through the sale of illicitly acquired information.
