> 1. Expose the absolute minimum number of services (and even then only software with a good security reputation). Perform a minimal install of your operating

> 1. Expose the absolute minimum number of services (and even then only software with a good security reputation). Perform a minimal install of your operating system then source compilation of latest services, with minimal features enabled. It is possible to compromise this configuration but it harder because there are less dormant features to exploit and it doesn't utilise widely used binaries.