,
4 tweets,
1 min read
Read on Twitter
Again: "defense in depth" is not a real concept. It's just a term vendors came up with to convince you that no matter what you already have, you also need to spend more to buy their product/service. It simply means "more security".
If it were a thing, it would mean "weakening perimeter defense and moving those resources into the depths". It's about moving security resources around, not adding security resources.
"More security" means more security. In other words, yes you'll be more secure if you add more security to the depths of your network -- but simply because adding more security makes you more secure.
Anybody who proclaims the value of "defense in depth" needs to explain how they are going to make perimeter security weaker.
