This paper will explore the role of defense in depth security procedures in improving computer and data security. It outlines step-by-step approaches for improving security by defining risks, assessing vulnerabilities, and implementing measures to reduce the likelihood that vulnerabilities may be exploited. The use of a defense-in-depth structure mandates that layered security mechanisms be used to increase security of the system as a whole. If an attack causes one security mechanism to fail, other mechanisms may still provide the necessary security to protect the system. .
This research will underscore the important role the implementation of a defense in depth system can play for organizations which collects and store important consumer details. There is a basic understanding of some of the fundamentals of a Defense in Depth system. These understandings range from sequencing attacks and activities, to robust work on insider threat that remains ongoing. While there are many different security applications that help to protect organizations information, there still would not be sufficient security if there isn't an actual defense in depth system implemented.
In today's business environment, controlling access to information is critical to maintaining a long-term competitive advantage. The advent of new and improving technologies can represent significant benefits for a company, but can also present new challenges in terms of protecting client and company information. Understanding the processes that are controlled by networked systems is typically easy to do, with many companies taking advantage of application white listing, design of secure systems and applications, as well as security by isolation as part of their approach to information security. There are however, a number of solutions which have been identified within the industry, but not implemented. As a result, it is vital for owners and operators of critical infrastructure to develop appropriate strategies for mapping and understanding the layers of information that need to be protected.
