Something also to consider is if this is a targeted attack, i.e. going after you\your company or is this some random script kiddy just poking around? An attached that has targeted you is going to be a much different attack than one of opportunity. This is also true with physical security as well.