Resource-constrained endpoint protection