Microsoft® Windows® 2000 Security Handbook

Why You Need an Intrusion Response Team

The chances that your site will face intrusion from the Internet today are very high. Attackers are becoming more sophisticated, and intelligent tools to perpetrate attacks on your system are available to novice crackers. This is an unfortunate but realistic view. This chapter outlines ways for you, as an administrator, to find out when you've been cracked and explains intelligent ways to deal with this real issue.

Many times, security incidents remain unreported for a number of reasons. Following are some common reasons why a security incident can slip through the cracks:

• Administrator reputation —Covering an intrusion to keep a "Never been hacked" reputation in place is a common reason an incident isn't ...