Editing Information security (section)

== Defense in depth<!--Section linked from [[Onion model]]: do not rename without fixing incoming link (see [[MOS:HEAD]])--> ==
[[File:Defense In Depth - Onion Model.svg|thumb|right|The [[onion model]] of defense in depth]]
{{Main|Defense in depth (computing)}}
Defense in depth is a fundamental security philosophy that relies on overlapping security systems designed to maintain protection even if individual components fail. Rather than depending on a single security measure, it combines multiple layers of security controls both in the cloud and at network endpoints. This approach includes combinations like firewalls with intrusion-detection systems, email filtering services with desktop anti-virus, and cloud-based security alongside traditional network defenses.<ref name=schneier2006>[https://www.schneier.com/blog/archives/2006/02/security_in_the.html Schneier on Security: Security in the Cloud]</ref>
The concept can be implemented through three distinct layers of administrative, logical, and physical controls,<ref name="Administrative Controls">{{Citation|title=Administrative Controls|date=2003-03-26|url=http://dx.doi.org/10.1201/9780203507933-6|work=Occupational Ergonomics|pages=443–666|publisher=CRC Press|doi=10.1201/9780203507933-6|isbn=978-0-429-21155-3|access-date=2021-05-29}}</ref> or visualized as an onion model with data at the core, surrounded by people, network security, host-based security, and application security layers.<ref>{{Cite book|chapter=Security Onion Control Scripts|date=2014|chapter-url=http://dx.doi.org/10.1016/b978-0-12-417208-1.09986-4|title=Applied Network Security Monitoring|pages=451–456|publisher=Elsevier|doi=10.1016/b978-0-12-417208-1.09986-4|isbn=978-0-12-417208-1|access-date=2021-05-29}}</ref> The strategy emphasizes that security involves not just technology, but also people and processes working together, with real-time monitoring and response being crucial components.<ref name=schneier2006/>