A former student asks for help dealing with security issues. Here’s what he recommends: Perform your own asset inventory. Create a database or spreadsheet showing all your assets, their services, applications, and OS if possible. Determine asset security policy and baselines, devise ways to detect deviations from these norms. Tune stock IDS/IPS alerts for a short time (one or two days) and then pare down the obviously unhelpful alerts. Try client-side and server-side exploitation scenarios.”]
Source: https://taosecurity.blogspot.com/2007/01/security-in-real-world.html