Minimizing the Attack Surface Removing unused features and disabling unneeded network services reduces the parts of the system that can be attacked. Removing the Local Web Browser Configuring the Browser (Kiosk Mode) Disabling Java in the Browser Disabling the PC/SC Daemon Disabling X Server TCP Connections Removing Unused Features Disabling Storage Hotplug Using USB Device Control Disabling USB Boot Leveraging AppArmor