Defense in depth (computing): Difference between revisions

Revision as of 10:41, 7 November 2024

Revision as of 10:42, 7 November 2024

Line 50:

* [[Data-centric security]]

* [[Physical security]] (e.g. [[deadbolt]] locks)

=== Example ===

In the following scenario a web browser is developed using defense in depth -

* the browser developers receive security training

* the codebase is checked automatically using security analysis tools

* the browser is regularly audited by an internal security team

* ... is occasionally audited by an external security team

* ... is executed inside a sandbox

==See also==