Editing Computer security (section)

===Difficulty of responding to breaches===
Responding to attempted [[security breaches]] is often very difficult for a variety of reasons, including:
* Identifying attackers is difficult, as they may operate through proxies, temporary anonymous dial-up accounts, wireless connections, and other anonymizing procedures which make back-tracing difficult – and are often located in another [[jurisdiction]]. If they successfully breach security, they have also often gained enough administrative access to enable them to delete [[Data logging|logs]] to cover their tracks.
* The sheer number of attempted attacks, often by automated vulnerability scanners and computer worms, is so large that organizations cannot spend time pursuing each.
* [[Law enforcement officer]]s often lack the skills, interest or budget to pursue attackers. Furthermore, identifying attackers across a network may necessitate collecting logs from multiple locations within the network and across various countries, a process that can be both difficult and time-consuming.

Where an attack succeeds and a breach occurs, many jurisdictions now have in place mandatory [[security breach notification laws]].