insufficient attack detection and prevention