Question

1. Explain the intent or meaning of the phrase “defense in depth”, especially noting what the three key elements of defense in depth are and providing an example of a failure in each domain.
   1. Define defense in depth:
   2. Domain 1:
   3. Domain 2:
   4. Domain 3:
   5. Failure in Domain 1:
   6. Failure in Domain 2
   7. Failure in Domain 3:

Answer 1

Well the phrase defence in depth means like layering defence where it assures a strategy of providing security to the data or information that we have and this whole thing happens in layers like if one gets crashed another layer is there to protect but this to have some drawbacks. But first of all the it has three elements like technical administration and physical it divides in this manner and its goal is detection response and prevention. Well coming to the failure we see there is a cloud where all the social media data get stores and we applied this defence depth concept though it is a good one but as technology is emerging it is having their own package of security toolbox and works on its own . It's like a silo of where it stores every information but neither the teams get to access it so the technical people won't know how to use it and we can see as evolving there is a management of complexity like adding multiple console s or etc to it and it increases the complexity level and won't be working that good finally since it can't handle much load it creates an obstacle and this becomes the doorway to the attackers to make a successful attack .so these are the drawbacks of defence in depth but so far it is useful upto some limit .