So, to become root use sudo su, which asks for YOUR password and not root's.
In case you have forgotten YOUR password, you need a live media. Or another OS which can access your /etc/shadow file.
If an attacker has physical access to your box, you've lost. Only a full disk encryption can defend against that (and might also bite you in the ass should you forget that password!).
