Security approach that stacks several protective layers, from physical security through identity and access, perimeter, network, compute and application to data, so an attacker who gets past one is still held up by another.
Also called defense in depth.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Defence in depth in context, with comparison tables and the common traps.
Terms in this definition
- Physical
Describes the concrete, real-world parts that put a logical architecture into effect.
- IDENTITY
A column property, written IDENTITY(seed, increment), that gives each new row the next number in a rising sequence. SCOPE_IDENTITY reports the latest value created in the current scope, and a rolled-back transaction still uses up the numbers it took.
- DMZ
A firewalled buffer network on premises that sits between the outside world and the core network. Microsoft Learn suggests ending ExpressRoute Microsoft peering there, while private peering lands on the core.