Damage Control for Network Applications

For all systems, one of the most important evaluation criteria is, or should be, security. With code complexity increasing by the minute, we are forced to accept that software contains bugs, flaws, some of which can be exploited for malicious purposes. To reduce, or eliminate the threat posed by these security holes, there are a lot of strategies. In this paper, we present some of the essential prepartion methods which will help you to withstand, and to prevent, as well as detect and recover from an attack. The presented techniques in-clude privilege separation, application confinement through sandboxing and virtualization, intrusion detection and the in-cident handling aftermaths. Most of the advice is targeted both at developers and sys-tem administrators