Protecting Bare-metal Systems from Remote Exploitation