with the current state of the art what we really have is a set of u201c fences u201d to keep attackers out we can keep people out but we really are not monitoring the u201c fences u201d to make sure that attackers are not going over under or through them this is different from our physical security because we have people who monitor the fences and if you try to come in over through or under the fence they can catch you wound you or worse in electronic security you can think of information tunnels as a way of going over or under the fence our internal systems have a difficult time of handling these sorts of information streams because they are unable to look at the actual packets within the tunnel they can only evaluate the tunnel packets and not the payload encapsulated within the tunnel itself this kind of assault normally requires inside help but automated tools can set up tunnels as well it just requires time to get your tool inside physical security also has the added advantage of placing a person a security clerk between the requester of information and the information itself this means that the individual requesting the data needs to know what it is that they want the only inventory of the sensitive information is within the secure vault itself if an electronic attacker gains access to a server they have access to that server 39 s directory the information inventory the security clerk can also dictate the method of how the information is to be reviewed people cannot just ask for the information and walk out again the current state of the art has nothing like this until now with the incorporation.