clean-code-principles.defense_in_depth.html Maven / Gradle / Ivy
Go to download
Show more of this group Show more artifacts with this name
Show all versions of sonarlint-core Show documentation
Show all versions of sonarlint-core Show documentation
Common library used by some SonarLint flavors
Defense-In-Depth
Applications and infrastructure benefit greatly from relying on multiple security mechanisms
layered on top of each other. If one security mechanism fails, there is a high probability
that the subsequent layers of security will successfully defend against the attack.
A non-exhaustive list of these code protection ramparts includes the following:
- Minimizing the attack surface of the code
- Application of the principle of least privilege
- Validation and sanitization of data
- Encrypting incoming, outgoing, or stored data with secure cryptography
- Ensuring that internal errors cannot disrupt the overall runtime
- Separation of tasks and access to information
Note that these layers must be simple enough to use in an everyday workflow. Security
measures should not break usability.