Security Strategies in Linux Platforms and Applications, 3rd Edition

When You Put Your Plan into Action

An attacker can take a number of paths to compromise your system. Regardless of which path the attacker takes, you will want to chase down the source of the breach or incident. This will be necessary to improve your operations and to prevent further incidents.

Of course, if there are files that should be found only on secure systems, there may be a different sort of security breach. Using a baseline image will help you more quickly get back online after you have gathered the necessary information. Although you may be able to clean the system and get it back online, it may simply be easier and quicker—not to mention safer—to start from a clean baseline, add the necessary services, and restore your data from ...