Monitor

• backups are very useful

  • initial backup for comparison
  • later backups as checkpoints

• know what 'normal' system is

• keep & check logfiles

• investigate oddities

• synchronise clocks if possible

  • it makes tracking network attacks far easier

• use tools: audits, portscanners etc.

Previous slide

Next slide

Back to first slide

View graphic version