Defense-in-Depth: Layered Security Architecture

Layer Strength

Perimeter Firewall70%

Network Segmentation60%

Host / Endpoint Protection55%

Application Layer (WAF)50%

Data Encryption at Rest65%

Compound breach probability

0.71%

Continuous background attacks

Live Readouts

Attacks launched

Blocked

Core breaches

Observed breach rate

—

How it works

Defense-in-depth places several independent security controls between an attacker and the protected asset instead of relying on one perfect wall. If each layer i independently blocks an attack with probability p_i, the probability that a single attack defeats every layer in a row is the product of each layer's failure rate:

P(breach) = ∏ (1 − p_i)  for i = 1..5
          = (1−p1)(1−p2)(1−p3)(1−p4)(1−p5)

This is why layering compounds so effectively: five layers each stopping only 50% of attacks (a mediocre single control) already reduces the breach probability to 0.5⁵ ≈ 3%. It is also why one very weak layer barely helps — a 5% layer barely dents the product — while raising a mid-strength layer to strong yields a large relative improvement.

Sliders — set each layer's independent block probability; the compound breach probability updates live.
Launch Attack Wave — fires a burst of simulated attacks that travel inward through the shells; each shell rolls its own random check against its strength.
Continuous background attacks — keeps a steady trickle running so you can watch the long-run breach rate converge toward the theoretical value above.
Observed breach rate — core breaches ÷ attacks launched so far; compare it to the compound probability box to see the law of large numbers at work.

Real-world relevance: this is the same multiplicative-risk-reduction logic behind the NIST/ISO layered-control model — firewall, network segmentation/IDS, endpoint protection, WAF, and encryption-at-rest — used to justify why organizations invest in several moderate controls rather than one "unbreakable" one.

Protected asset (core) Attack in flight Core breach

⚠ Couldn't load the 3D engineThree.js failed to load from the CDN. Check your connection and reload.