DevOps & Tooling / Knowledge library
Defense in Depth
Layers independent preventive, detective, and recovery controls
Why learn Defense in Depth?
It avoids treating one security mechanism as infallible
The problem it solves
It contains attacks that bypass an individual control
Where it came from
Defense in Depth is a security concept that layers independent preventive, detective, and recovery controls. Its guarantees and tradeoffs depend on the concrete implementation and operating context.
Build your understanding
Work through these exercises in order. Try the task before opening a reference.
- Define Defense in Depth and distinguish it from a neighboring concept.
- Choose a realistic task where Defense in Depth is appropriate.
- Identify a failure mode caused by misusing Defense in Depth.
- Interpret a small design or result involving Defense in Depth.
- Explain one tradeoff or limitation of Defense in Depth.
Documentation and sources
- OWASP Developer Guide: Security Principles (devguide.owasp.org)