I'm working on a thesis about the security hacker community.

When a 0day is published, how can an administrator secure his application/website between the time the 0day is published and the patch is developed ?

Moreover, most of the time, this same 0day is used for months by blackhats, so are the blackhats ahead of whitehats ?