1. 网络窃密：攻破互联网或侵入内部网，窃取个人隐私、单位或国家机密，有时也收集大量基础数据，为将来开展其它行动做准备。
2. 攻击网页：篡改对方单位、政府机构网页或设法阻止访问，这样做一般来说实际危害不大，但对被攻击者的声望和威信是个打击。
3. 网络宣传：通过互联网、手机等手段广泛散布对自己有利的真假消息，操纵舆论，影响士气。
4. 拒绝服务：近期发生的多起事件都属这类，通过分布式攻击，让服务器资源不足，造成大片断网。
5. 关键点破坏：通过病毒攻击、电磁干扰、实际火力打击等把对方网络中关键性的服务器、转接设备、卫星等破坏掉，从而使整个系统瘫痪。
6. 公共服务破坏：对发达城市严重依赖网络管理的供水、供电、交通信号、通信等系统发起网络攻击，造成管线、网络的瘫痪，制造城市混乱。
7. 硬件潜伏破坏：通过大的IT产品厂商或特工把藏有破坏程序的硬件当成正常硬件出售或安装到敌方枢纽部，战时摇控启动攻击。据说美国在1991年海湾战争中就利用预先掉包的打印机芯片作怪，使伊拉克防空系统错乱失去了应有战斗力。

Cyber security tips from Sauder School Dean, Daniel F. Muzyka, from his recent column in the Globe and Mail include:

• Make sure security awareness exists and is maintained. Realize that users are generally rational actors: Give them incentives for good behaviour.【保持有安全意识】
• Keep up with the technology. New hardware offers new solutions, including fingerprint readers that secure laptops.【跟踪新技术】
• Remember the human element. People often avoid doing this because they worry, ironically enough, that it will harm their computer. It shouldn't be this way. Organizationally, patches can be supported by understanding them, testing them, and disseminating them efficiently and quietly with help available for those with difficulties.【不要忽视人的因素】
• Don't collect data you don't need: You can't lose it if you don't have it.【最小权限】

Sauder School Associate Professor of Management Information Systems Hasan Cavusoglu offers the following advice for companies looking to improve their security:

• Cyber security awareness ust be presented in creative ways to get attention. Don't just give rules, because rules get broken. They have to understand what they do is also affecting themselves. For instance, employees should be made aware that their promotions and bonuses will depend in part on how they’re handling information security. Money is very tangible and a very effective way to change behavior.【要让他们知道，做的事情对自身的影响】
  
• Make employees aware with literature about cyber crime and the legal consequences. Employees will know that if they are caught violating cyber security, they will get into trouble. Organizations should use these "carrot and stick" tactics at same time. 【要让他们知道，什么是合法的什么是犯罪的】