Defense in depth

Defense in depth is a security posture in which each protection assumes the others might fail.

Defense in depth is a security posture in which each protection assumes that the others might fail. For a sandbox, the posture consists of four protections. The first is the isolation boundary, and the second is the jail around that boundary. The third is network policy, such as egress control. The fourth is limited credentials, as described under secrets.