Linux.com: Kernel Level Security

“As technology gets more and more advanced, the need for better
electronic security becomes higher. Many technology companies
have made millions by providing user-space security programs and
Web Appliances. While this top-down approach to security has served
its purpose, there has been a push towards a more bottom-up
solution.“

“The flexibility of the Linux kernel allows for such an
approach. There are several new kernel patches that can prevent the
basic exploits used to breech security. The Linux Intrusion
Detection System (LIDS) is a kernel patch that can completely
secure files on your hard disk. When the LIDS kernel components are
in effect, a specified list of files CANNOT be changed, not even by
root. An instance where this patch would be exceptionally handy is
preventing the new trend of web graffiti….”

Complete Story