What are Defense in Depth Measures? | Data and Host Security
06.05.2020
Read
As the cyber criminals advance in the methods and tools they use, defense in depth measures gain significant importance. In this article, we will discuss what defense in depth measures are and how you can implement them for data and host security.
Cyber crime is very similar to the Hydra, that infamous mythical creature. Cutting one of its heads is no use if you really want to be safe and secure. You need to come up with measures and strategies that allow you to cut off all three. With traditional cyber security measures, you are able to protect your organization from only one of these unholy heads. Defense in depth measures, on the other hand, offers thorough protection against each and every attack.
In this article, we will take a closer look at what defense in depth is and how you can implement defence in depth measures to protect your organization from cyber criminals.
What is defence in depth?
Defense in depth (also known as the DiD) is a comprehensive approach to the cyber security measures. It aims to layer multiple defensive mechanisms to the point of redundancy. That way, any ill intended user or intruder has to find their way through multiple cyber security measures. Moreover, if one of the security layers fails, the other ones can step up to hinder any attack.
With defense in depth strategies, the most important assets of an organization are properly protected. On the other hand, there can be fewer security measures guarding relatively less important assets.
Why is defense in depth measures necessary?
According to a recent study by IBM, the average cost of data breaches is 4 million dollars. In addition to the monetary cost, a data breach also costs an organization the trust of their customers. It is no secret that we all try to avoid any business that gives off the impression that they are not very responsible with their customer information.
A proactive and thorough defense like defense in depth can protect organizations from data breaches and their grave consequences. Moreover, multi-layered approach of the defense in depth measures can be customized for unique needs. For instance, you can detect the most important assets of your organization and build various layers around the aim of protecting these assets.
What are defense in depth measures for data and host security?
Defense in depth measures can be tailored in accordance with the needs of your organization. If your primary goal is to protect the data and ensure host security, you should pay attention to the 5 essential points of defense in depth:
Patch Management: Patch management refers to the processes of getting, testing and implementing various patches on software, tools and applications. It helps keeping your defence measures up to date.
Virus Protection: Viruses have been one of the most popular tools used by cyber criminals for a very long time. Using proper tools, software and mechanisms helps you keep your organization safe.
Host-based Firewall: Host-based firewalls aim to protect individual devices from malware and viruses, and they allow the cyber security professionals to stop the spread of such malicious software throughout a network.
Server Hardening: Server hardening refers to the various processes whose goal is enhance the security posture of a server.
Perimeter Security: Measures of perimeter security aims to keep the physical assets of your organization safe. It can include CCTV cameras, putting a lock on the server room door and similar measures.
