Dictionary · Defensive Security
System Hardening
Hygiene · Beginner
Reducing a system's attack surface by removing unneeded software, closing unused services, applying secure settings, and keeping it updated.
A default install is convenient and often too open. Hardening is the deliberate configuration that leaves only the required services, accounts, and protocols.
Example: A new server baseline disables cleartext remote login, removes unused roles, and turns on disk encryption.
Common misconception
- Hardening is not a one-time script you forget. New software and exceptions need the same review.