The <a href="http://project.honeynet.org/papers/enemy/">article at Honeynet </a>provides a decent overview of the basic problems faced by a system administrator.