Inside Defense-in-Depth
Abstract
So what it is, just in definition, it's multiple controls that are related, addressing different security concerns in an organization. So one instance would be, you know, you've got firewalls to protect you from malicious traffic, but you've also got anti-virus software in case malicious traffic reaches your network. So it's just a layered approach at addressing information security and information insurance, such that if one layer fails, you've got other layers in place to kind of make sure your network is sustainable in the face of attacks and failures.
Document Details
- Document Type
- Technical Report
- Publication Date
- Jan 01, 2006
- Accession Number
- AD1130393
Entities
Organizations
- Carnegie Mellon University