Cyberwarfare: Information Operations in a Connected World, 2nd Edition

Network Defense in Depth

Effective defenses for networks typically require multiple layers of technologies, processes, procedures, awareness, and training, which operate in layers to provide defense in depth. Network defense in depth must focus on attacks from outside a network, attacks from trusted systems allowed to connect to the network or that may be compromised and then used to attack the network from the inside, and attacks from coworkers or trusted network or system administrators.

Layered defenses in a network design allow defenders to deal with a breach in one or more layers effectively by using other defenses to prevent the attack from making further progress. It allows them to detect the attack and react appropriately. In computer ...