Network Security, Firewalls, and VPNs, 3rd Edition

Hardening Systems

Hardening systems focuses on improving security of hosts and nodes. Hardening is the process of reducing the attack surface of a potential target by removing unnecessary components and adding in protections. Although each organization usually creates its own custom and internal hardening processes and procedures, most hardening guidelines have common elements and components.

When considering your network and systems, think of an attack surface as the candy coating on a popular button-shaped chocolate. The colorful outer shell is not supposed to melt easily and therefore protects the heat-sensitive inner contents (the chocolate). If the outer candy coating is misapplied, forms cracks due to pressure or dropping, or is exposed ...