Hardening

Hardening is a cybersecurity practice that involves securing a system by reducing its attack surface and vulnerabilities. It includes configuring systems, applications, and networks to minimize security risks, often by disabling unnecessary services, applying patches, and enforcing strict access controls. This proactive approach aims to protect against threats like unauthorized access, malware, and data breaches.

Also known as: System Hardening, Security Hardening, OS Hardening, Application Hardening, Server Hardening

Why learn Hardening?

Developers should learn hardening to build secure software and infrastructure, especially in production environments handling sensitive data or critical operations. It is essential for compliance with standards like ISO 27001 or GDPR, and for roles in DevOps, cloud security, or system administration to prevent exploits and ensure resilience against cyber attacks.

Learning Resources

• docs: NIST Guide to General Server Security
• docs: CIS Benchmarks
• tutorial: Linux Hardening Guide by Ubuntu
• docs: OWASP Application Security Verification Standard
• course: Coursera: Introduction to Cybersecurity Tools & Cyber Attacks