Defense in Depth (EN)

Defense in Depth Architecture

flowchart TD     A[Internet] --> B[Perimeter Firewall]     B --> C[DMZ]     C --> D[Web Server]     C --> E[Mail Server]     B --> F[Internal Firewall]     F --> G[Corporate Network]     G --> H[Application Firewall]     H --> I[Application Server]     H --> J[Database Server]     G --> K[Endpoint Protection]     G --> L[Access Control]     G --> M[Data Encryption]     G --> N[Monitoring & Logging] 

In Context

• Typically used together with Zero Trust Architecture
• Related to: Least Privilege, Principle of Least Authority, Security by Design
• Example use: Multi-tiered network segmentation with redundant security controls