Experts question the wisdom of current ‘layered’ cyberdefense strategies as attacks become more sophisticated and breaches abound.
Layered security. Security integration. Defense in depth. For years, cybersecurity professionals and vendors have been preaching sermons on the merits of an enterprise security strategy that mixes a variety of tools and technologies to create a complex barrier that hackers can’t penetrate. “Layered security” has become as much a part of industry parlance as authentication or encryption.
There’s just one problem: It isn’t working.
While enterprises and government agencies have invested unprecedented resources in cybersecurity over the past few years, the incidence of new data threats and breaches remains at record highs. The most recent Verizon Data Breach Investigations Report (PDF) indicates that breaches involving hacking and malware were both up considerably last year, with hacking involved in 81% of incidents and malware involved in 69%.