Automated vulnerability assessment tools should be used as a check on human error. Inc. Penn's Information Security office will also run network-based scans on request that can perform limited vulnerability assessment over the network. Securing them before placing them on PennNet is a critical step in the overall security of your application. Security patches must be applied on a timely and ongoing basis. Knowledge that logs are kept acts as a deterrent to abuse.
Logs are also essential in investigating incidents after the fact.
Logs are typically created both by the operating system as well as by applications like web servers, mail servers, etc. To ensure integrity, logs should be written to another computer whenever possible. Logs often contain sensitive information such as dates and times of user access. Logs containing sensitive information should only be accessible to authorized staff and should not be publicly accessible. These scripts often contain security holes, and make a very attractive target to potential intruders.