Just posted a new post on securing CRE Loaded admin area. The post is available on http://blog.wasimasif.com/hardening-protecting-cre-loaded-admin-area/
The post lists following simple methods to enhance security of admin area.

• Don’t use default http://mycresite.com/admin/ structure
• Use password protected directories
• Restrict access to specific IPs only
• Use secure user names and passwords