Companies and countries are investing billions to protect their information from unauthorized people. The media hypes every new attack on the Internet, with this information the information system manager campaigns for more and more funding. There are many Information System Managers in the field today that are uninformed on the potential threat that loom on the Internet. All managing information must be aware of the threats in order to make informed decisions about the measures that will be put into place as well as the priorities that we will give each measure to ensure that all critical information is protected. It is only through this enlightenment that we will be able to make informed decisions in purchasing security tools and developing policy for our users. The technology has shrunk the world by providing a wealth of information at our finger tips. Often the security of that information is taken care of in reactive manner by deploying resources defensively through firewalls and the access control. Some active electronic warfare measures for deception of the adversary are recommended to achieve information assurance by achieving information superiorities.

1. WhiteHat Website Security Statistics Report | 10th Edition | Fall 2010
2. Reuters. Microsoft Break-in, 9:25 EST October 27, 2000, accessible at http://www.zdnet.com/intweek/stories/news/0,4164,2645864,00.html
3. Baocun, Wang and Fei, Li, Information Warfare, excerpted from The Liberation Army Daily, June 13 and June 20, 1995.Available at http://www.fas.org/irp/world/china/docs/
4. SANS Institute. How to Eliminate the Ten Most Critical Internet Security Threats. January 18, 2001. Available at http://www.sans.org
5. WASC Threat Classification v2.0–http://projects.webappsec.org/Threat-Class
6. SANS Institute. How to Eliminate the Ten Most Critical Internet Security Threats. January 18, 2001. Available at http://www.sans.org
7. Gen Gordan R. Sullivan and Col James M. Dubik, "War in the Information Age," Military Review 74 (April 1994): 46-62.

Information Assurance Information Security