1. A method for protecting a data processing system against attack by a vandal, the method comprising the steps of: determining, by a vulnerability scanner, an externally visible vulnerability of a data processing system; configuring an observation engine to detect a flow associated with the vulnerability; and when the observation engine detects a flow associated with the vulnerability, blocking the flow.