Microsoft® Windows® Security: Essentials

Implementing a Defense-in-Depth Security Strategy

Defense-in-depth is a strategy employed by security professionals that includes multiple layers of security. Instead of implementing one security technique and then celebrating success, you must treat security as an ongoing process. You can’t simply password protect your systems and files and say you’re done.

Think about an attacker. Attackers often get money when they successfully attack a network. Sure, some attackers are just thrill seekers hacking into a system for the fun of it. But most attackers today are dedicated criminals trying to break into systems for monetary gain.

Imagine that an attacker can make $5,000 a week from attacks. He is likely highly motivated to learn everything he can ...