defense-in-depth
Installation
SKILL.md
Defense in Depth
Principle: Security should be viewed holistically. Wherever possible, multiple levels of security controls should be used. No single control provides perfect security, but layering different controls makes attacks extremely complex and unlikely to succeed.
Key Aspects
Layered Security Controls
Implement multiple independent layers, each providing a different line of defense:
| Layer | Examples |
|---|---|
| Network | Firewalls, network segmentation, VPN, private subnets |
| Host | OS hardening, host-based IDS, patch management |
| Application | Input validation, authentication, authorization, output encoding |
| Data | Encryption at rest and in transit, access controls, backup |
| Monitoring | Intrusion detection, log aggregation, alerting, SIEM |