Preparing Yourself For System Intrusions

An in-depth article on preparing yourself for system intrusions. Beyond "keep up to date on all security updates", the article gives tips and pointers on how to identify and recover from an unauthorized access to your system. Some sysadmins consider an exploited system tainted and do not "recover", but "rebuild". To them, it's easier to restart from scratch, patching the previous holes, than to take the chance that somewhere in their system is lurking malicious code or a backdoor planted during the exploit. Scary stuff. Makes those guys developing the "boot and run from CD" router software seem justified in their paranoia.