The real world


no system is completely secure
most attacks by far are automated and use known vulnerabilities
root-kits are common and user-friendly
problems can remain undiscovered for months