There is no point in trying to secure a Struts 1.x application. It has multiple unpatched security issues that will not be fixed. You need to migrate the application to some other framework that is still supported.
Why is the word "abbreviation" so long? And this ad is so short?