Common prevention methods: penetration testing anti-malware software firewalls user access levels passwords encryption physical security