~/moritzsamrock_

Hardening

Hardening: Reduces the attack surface through secure configurationSecure ConfigurationA configuration baseline that minimizes unnecessary exposure and enforces intended security controls. and the deactivation of unnecessary functions. The concept shapes the security architectureSecurity ArchitectureThe structured design of security controls, trust boundaries, data flows, and operational responsibilities. and systematically reduces opportunities for attack or lateral movement. It should be planned on a risk-based approach, documented, tested, and regularly adjusted.

How it works and where it fits

Hardening is a preventive, detective, or corrective security control. Its effect depends on where it sits in the architecture, which data and decisions it processes, and how it might be bypassed. A control reduces a defined risk but rarely removes it completely, so it should be combined with additional layers of protection.

Practical security relevance

Before deployment, the objective, ownership, coverage, and expected behavior should be defined. Secure defaults, controlled exceptions, logging, and periodic effectiveness tests matter more than installation alone. Operational metrics should expose both blocked or detected activity and gaps, false alerts, and effects on legitimate business processes.

  • Baseline ConfigurationBaseline ConfigurationDefined target state for secure system settings and authorized components.: Defined target state for secure system settings and authorized components.
  • Security Technical Implementation GuideSecurity Technical Implementation GuideDetailed hardening specification from the US defense sector for systems and products.: Detailed hardening specification from the US defense sector for systems and products.
  • Patch ManagementPatch ManagementPlans, tests, deploys, and monitors security patches and bug fixes.: Plans, tests, deploys, and monitors security patches and bug fixes.
  • Attack SurfaceAttack SurfaceThe totality of all potentially vulnerable entry points of a system.: The totality of all potentially vulnerable entry points of a system.

Related terms