https://securityblueprints.io/invariant_tags/defense-in-depth/ Recent content in Defense-in-Depth on Security Blueprints Hugo en user@example.com (Niels Provos) user@example.com (Niels Provos) Security Blueprints, LLC Sun, 06 Sep 2026 23:57:45 +0000 https://securityblueprints.io/security-invariants/egress-control/ Mon, 28 Oct 2024 00:00:00 +0000user@example.com (Niels Provos) https://securityblueprints.io/security-invariants/egress-control/ Overview Egress control is a security invariant that requires all outbound network traffic from services to be explicitly allowed through domain-based allowlists. By enforcing that services can only connect to pre-approved external destinations, this security control: Prevents exploitation of vulnerabilities that require external connectivity, e.g. to download a second stage payload. Blocks command and control (C2) traffic from compromised systems Limits data exfiltration attempts from compromised hosts Provides clear visibility into legitimate vs.