Traditionally, we have been that defense in depth is the best practice approach if we want to secure our premises from security breach. However, I recently read about DoD's Joint information environment (JIE) and one component talks about single security architecture. However, after reading up a bit, I still could not grasp what the JIE actually is and what SSA is. Can you simplify JIE and SSA? Is it about using the cloud? What is the advantage in moving into JIE architecture instead of defense in depth?

  • Can you provide a bit more context around who is "we" ? It might help people better understand your business model. – sir_k Jul 4 '15 at 7:44
  • Hi, "we" is anyone who wants to protect systems and networks against cyber attacks. – Pang Ser Lark Jul 4 '15 at 7:49

If I look at a presentation about the topic it does not look like replacing defense in depth, but replacing a heterogeneous environment containing lots of different mostly independent and sometimes incompatible security solutions with a more structured environment where all parts work together to better detect and deal with the risks. It still contains defense in depth, i.e. the idea is not to restrict the risk management to a single perimeter. But the major point is that the different security layers now work with each other so that information collected at one layer might be used to optimize protection at another layer.

Example: different layers detect different kind of suspicious behavior. While each of these information separately is not enough to detect an advanced attack, it could be detected by combining the information.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.