Which one of the following is NOT an attack type for which monitoring and detection is less effective?
a. Inappropriate usage incidents
b. Malware incidents
c. New attack types
d. Unauthorized access incidents