Security Fundamentals & Crypto · Foundational

Defense in Depth

Layering multiple, independent security controls so that the failure of one does not compromise the asset.

Definition

Defense in depth (layered security) places overlapping controls across physical, technical, and administrative layers, and across network, host, application, and data tiers. An attacker must defeat several controls to succeed, and each layer can detect or slow an attack. It is a core architecture principle in nearly every security framework.

Don't confuse it with

Related terms