defense in depth

Defense-in-Depth is a multi-layered security concept for IT security. This security strategy is based on the fact that an attacker must overcome several security functions before gaining access to the data to be protected.

The Defense in Depth security concept consists of several security controls that an attacker must overcome to get to the desired data. The various security controls are in layers around the data asset to be protected. Each layer supports a specific security function. This could be an endpoint security function, one for authentication, perimeter security, firewalls and IPS systems, or single sign-on for an app.

The concept for Defense-in-Depth was conceived by the National Security Agenca( NSA).