The Concept of Defense in Depth (PDF)

Academic Paper from the year 2017 in the subject Computer Science - IT-Security, grade: A, Saint Leo University, language: English, abstract: In this paper, the author will dive into the motivation behind "Defense in Depth" and a different layered approach to ensure the security of an information infrastructure. Furthermore, different counter measures to protect the integrity of the information system from both internal and external attacks will be analyzed.

Considering the recent cyber-attacks around the world it is understandable that organizations are considering ways to prevent, mitigate and control their information infrastructure against both internal and external attacks. The concept of Defense in Depth (DiD) revolves around using various methods to protect information systems (layered Defense) that work together in a coordinated manner to protect a network from an attack. Although, it is difficult to guarantee the total protection of a system from eternal attacks, using different counter measures can mitigate these threats to the integrity of the information system. Defense in Depth entails the use of holistic strategies to analyze and identify potential attack surfaces to secure the information system from both internal and external threats.