1. A method for preventing attacks in a monitored data processing system comprising the steps of: upon detection of an intrusion, identifying a malicious code string related to the detected intrusion; extracting the malicious code string; and forwarding the malicious code string to an intrusion limitation subsystem to reduce further intrusions based on the malicious code string.