A process intended to eliminate a means of attack by patching vulnerabilities and turning off non-essential services.