Ethical Hacking: Techniques, Tools, and Countermeasures, 4th Edition

Defense in Depth

Before discussing any particular technology to defend computing environments from attacks, it is important to consider how these technologies should be deployed. The basic strategy of securing environments starts with minimizing the attack surface of any protected resource. You can do this by removing or substantially reducing an attacker’s ability to launch an attack against a vulnerability in the system. The most secure environments use a combination of strategies to provide the highest level of security. Most importantly, you must never rely on a single control to protect a resource. Always design a defense strategy that is multilayered, which requires that multiple controls be compromised to exploit any vulnerability. With ...