Start from the position that everything _can_ and _will_ be exploited in numerous different ways.

From there you need to realize that you need to know _everything_ about every operating system and...