OS / System Software Layer

• Risks: Privilege escalation, kernel vulnerabilities, buffer overflows.
• Controls:
  • OS hardening (minimal trusted base).
  • Security frameworks: SELinux / AppArmor.
  • Timely patching & mandatory code signing.
  • Principle of least privilege.

Note: This layer is a frequent target for attackers – protecting it reduces system-wide exposure.