Cyberwarfare: Information Operations in a Connected World, 2nd Edition

Defense-in-Depth Strategies

Many groups and organizations have published defense-in-depth strategies or strategies that rely on defense in depth as a core concept. All have emphasized elements that are specific to their organizational goals, the technologies that they rely on, and the attackers and attack techniques they expect to face. The following sections examine publicly available defense-in-depth strategies from the U.S. NSA and the Department of Homeland Security. You’ll also examine how elements of the U.S. government’s defensive strategies and priorities mirror those of the SANS Critical Security Controls, a popular list of network security design considerations that the business world often uses in network security implementations. ...