After Activation: by definition, once the activation point has been reached, the attacker has
already violated the software's intended control sphere. At this stage, only external mechanisms
can limit the damage, such as role-based access control, privilege separation or jails, or
automated intrusion detection and prevention, etc.