The process of securing a system by reducing its vulnerability to attack. This is often done by disabling unnecessary services, applying security patches, and using firewalls and intrusion detection systems. It is used in cybersecurity to protect systems from unauthorized access. Examples include disabling unneeded network ports, implementing access controls, and regularly updating software.