https://technicalengine.com/10-basic-security-enhancements/