There are many universal principles. Let's review the most important principles and understand how they assist in preventing attacks and making attacks more difficult, thus minimizing the damage caused by any attack and assisting in recovering from these attacks:
- Defense in depth: Defense in depth means multiple and redundant layers of security. The purpose is to make it difficult for an attacker to compromise your system. Multi-factor authentication is a great example. You have a username and password, but you must also type in a one-time code that's sent to your phone. If an attacker discovers your credentials, but doesn't have access to your phone, they won't be able to log in to the system and wreak ...
