Ways to detect users attempting to break into the system are as follows:
-
Setting the LOGONATTEMPTS security option to detect repeated log-on attempts. If the count in the user record reaches the value set for LOGONATTEMPTS, the user is locked out.
-
Using the ATLASSECURITY library that is coded to track failed log-on attempts, and to get a report of the users locked out. A user is identified by a passed-in station name. That station name is the IP address.

