There's too many ways to do it by abusing legit protocols, tricking web browsers, etc, what fool proof countermeasure would you think there is? Other than out-d

There's too many ways to do it by abusing legit protocols, tricking web browsers, etc, what fool proof countermeasure would you think there is? Other than out-doing the attacker by over provisioning your networks?