There are two basic technologies that could get things under control: Capability based security[1] is the best choice, but isn't widely available outside of ve

There are two basic technologies that could get things under control: Capability based security[1] is the best choice, but isn't widely available outside of very specialized environments. *Like java/javascript - Capability Based Security is NOT the same as "capabilities" on your smartphone for "Allow Location Services" in your phone, etc. Unidirectional Networks[2] are a product you can buy right now. Quite simple and un-hackable, they only allow data to flow in the direction desired. There are often a pair of servers set up on either side to act as a proxy compatible with normal network services such as tcp/ip, ftp, www, file stores, etc. With these two tools, you can build systems that only allow desired data flows required for the desired behavior and inhibit external injection of control. [1] https://en.wikipedia.org/wiki/Capability-based_security https://en.wikipedia.org/wiki/Capability-based_security [2] https://en.wikipedia.org/wiki/Unidirectional_network https://en.wikipedia.org/wiki/Unidirectional_network