DEV Community

Serguey Asael Shinder
Serguey Asael Shinder

Posted on

Defense in Depth Beats a Perfect Wall

There is no one perfect wall.

Every wall has a day
someone finds the gap.

So don't bet everything
on a single defense.

Bet on layers.

Validate at the edge —
and also check again deeper.
Authenticate —
and also limit what each role can reach.
Encrypt in transit —
and also at rest.

Any one layer can fail.
The point is that they don't fail together.

A breach through the first wall
should still hit a second, and a third,
each one buying time,
each one shrinking the blast.

One flawless barrier is a fantasy.
Several imperfect ones
are how real systems survive.

Assume the wall falls.
Build the next one behind it.

– Serguey Asael Shinder

Top comments (0)