Ah, from all could see, the article said next to nothing about how to detect an exploitation. Also the article concentrated on malicious, that is, malware, ex

Ah, from all could see, the article said next to nothing about how to detect an exploitation. Also the article concentrated on malicious, that is, malware, exploitations. Also can define zero day as any problem never seen before. The cause might be software flaws, hardware failures, human system management errors, and more, all in addition to malicious causes. Then for any and all zero day problems, need to detect, diagnose, and correct. So, start at the beginning: How to detect? Here issues are, what parts of, say, a server farm to monitor, what data to get and use, what to do about rates of false alarms and missed detections, and more.