Is there any standard way to prevent shared web servers from being abused? I run a CPanel box with a few people on it, and I get the occasional person that decides to use it to DoS other websites. My current 'detection' involves looking at Munin graphs for traffic spikes, then poking around on the machine until I find the cause.
Is there any software out there to detect attacks as they happen?
I run the following: LMD - http://www.rfxn.com/projects/linux-malware-detect/ Clanscan
These do an okay job of detecting your standard C99 shell, or commonly used DoS scripts, but it doesn't detect any sort of custom stuff.