What is Defense in Depth?
An information assurance concept in which multiple layers of security controls are placed throughout an information technology system.
Why it matters
Understanding this concept helps in grasping how modern networks and security systems operate, providing a foundation for more advanced topics.
Real-world Analogy
Like a medieval castle with a moat, tall walls, archers, and an inner keep. If one defense fails, the next one is ready.
Other Dictionary Terms
Access Control List (ACL)
A list of rules that specifies which users or systems are granted or denied access to a particular object or system resource.
Dictionary TermAdvanced Persistent Threat (APT)
A stealthy threat actor, typically a nation state or state-sponsored group, which gains unauthorized access to a computer network and remains undetected for an extended period.
Dictionary TermARP Spoofing
A type of attack in which a malicious actor sends falsified ARP (Address Resolution Protocol) messages over a local area network.