Application build-time techniques

Hardened vs Locked

  • locked will have most non-essential and non-standard features removed

Language specific

C/C++

Linux features

  • PIE
  • compilation flags
  • ASLR
  • stack protection

Fortified functions