Lesson 6: Host, Endpoint, and Application Security

A host is a computer or server connected to a network. An endpoint includes laptops, desktops, phones, tablets, and other user devices. Host and endpoint security focuses on making these systems resistant to misuse and compromise.

Common host risks include:

• missing patches,
• weak local accounts,
• unnecessary services,
• malware infection,
• poor device configuration,
• unsafe downloads,
• unauthorized software.

A device with strong network protection can still be compromised if the local system itself is weak. That is why endpoint security matters.

Hardening means reducing unnecessary exposure by securely configuring a system.

Examples of hardening:

• remove unused services,
• change default settings,
• disable unnecessary accounts,
• apply secure permissions,
• enable logging,
• keep software updated.

Patch management is one of the most basic and most frequently tested controls. Vulnerabilities in operating systems, browsers, databases, and apps are often addressed through updates. Delayed patching increases exposure.

A simple memory tip:

Unnecessary services create unnecessary attack surfaces.

This is why a secure build is preferred over installing everything and hoping nothing is abused.