diff --git a/debian/control b/debian/control
index 93f9e6e..866d7c7 100644
--- a/debian/control
+++ b/debian/control
@@ -2,7 +2,7 @@ Source: dns-flood-detector
 Section: net
 Priority: optional
 Maintainer: Jan Wagner <waja@cyconet.org>
-Build-Depends: debhelper (>= 9), libpcap0.8-dev
+Build-Depends: debhelper (>= 9), libpcap0.8-dev, hardening-wrapper
 Homepage: http://www.adotout.com/
 Vcs-Browser: https://scm.uncompleted.org/projects/debian/repository/show/dns-flood-detector
 Vcs-Svn: https://scm.uncompleted.org/svn/debian/dns-flood-detector/trunk
diff --git a/debian/rules b/debian/rules
index 44b8cd0..ef9265c 100755
--- a/debian/rules
+++ b/debian/rules
@@ -4,6 +4,10 @@
 # Uncomment this to turn on verbose mode.
 #export DH_VERBOSE=1
 
+# hardening
+export DEB_BUILD_HARDENING=1
+CFLAGS:=$(shell dpkg-buildflags --get CFLAGS)
+
 CFLAGS += -D_BSD_SOURCE -Wall -g
 LDLIBS += -lpcap -lpthread -lm