Guard the physical security of sensitive systems. If there is insufficient physical security guarding hardware containing mission-critical systems, then these systems are vulnerable to theft or malicious destruction on the premises, thus rendering all other security measures are futile. Review Web scripts, especially active server pages and cgi scripts, for security vulnerabilities. Developers of Web-server applications often meet business and technical objectives without including a security perspective. A review can help identify weaknesses that can be easily exploited-for example, enabling attackers to deviate from the script's intended application.
Attackers tend to disseminate their activities to the hacker community at large.
Staying aware of their progress leads to a better understanding of their methods, which can help companies' head off attacks. Employ multiple layers of security. Any single solution can be compromised, given enough time. Multiple levels lessen the likelihood that an attack will be quick and easy for hackers. Covert security involves confusing and exposing hackers, turning the tables on hackers, and enabling companies to gather information about attacks without the intruder knowing.