A junior security employee tells you a web application has halted. An examination of the syslog shows an entry from the web application indicating the canary word has been altered. What does this message indicate?
1) The NIDS has blocked an attempted attack.
2) The firewall has failed in protecting the subnet.
3) A buffer overflow attack has been successful.
4) A buffer overflow was attempted but failed.