Software Architect's Handbook

Defense in depth

Security tends to be more effective when a variety of techniques is used together. No security control is perfect, and defense in depth is the concept of using multiple techniques in conjunction and the belief that in doing so a software system will be made more secure.

If one security control fails, a threat may be prevented by another security control. Layering defenses using several independent methods will make it much more difficult to exploit a vulnerability.