An attack is an actual act by a threat agent against assets of an information system. The path used to attack the target is called an attack vector. There are three main types of attack vector and threat:
- Network threats: This refers to the threat against the networks of the organization
- Host threats: These are the threats against the host, including hardware and the operating system
- Application threats: This refers to the threat against the system programs
