Minimizing the Attack Surface Secure App Choices Using Browser Kiosk Mode Disabling the PC/SC Daemon Disabling X Server TCP Connections Disabling RPC Portmapper Service Disabling Storage Hotplug Using USB Device Control Disabling USB Boot