Detecting User Break-In Attempts

Ways to detect users attempting to break into the system are as follows:

  • Setting the LOGONATTEMPTS security option to detect repeated log-on attempts. If the count in the user record reaches the value set for LOGONATTEMPTS, the user is locked out.

  • Using the ATLASSECURITY library that is coded to track failed log-on attempts, and to get a report of the users locked out. A user is identified by a passed-in station name. That station name is the IP address.