Slide: https://recon.cx/2017/montreal/resources/slides/RECON-MTL-2017-DiggingIntoTh...
Speaking of attack surfaces reduction at runtime, this script might be a workaround: https://github.com/hardenedlinux/Debian-GNU-Linux-Profiles/blob/master/scrip... https://github.com/hardenedlinux/Debian-GNU-Linux-Profiles/blob/master/docs/...
Have fun!