Considering defense in depth, for software applications

The advantages of applying a defense-in-depth strategy for software application security are discussed. By using a defense-in-depth paradigm, attackers defeat all defenses to access protected items. With defense properly arrayed, attackers cannot gain insight into inner defensives while attacking outer ones and, a degree of mutual support but not interdependence exists among defensive layers. As defense-in-depth approach seems appropriate for application protection, it appears that the best defense-in-depth strategy for software source and binary code would undertwine application defenses in such a manner that each defensive technology interlocks with and supports all the others.