According to the Open Web Application Security Project (OWASP), which of the following security principles...

Defense in depth is a recognized secure software design principle. It means using multiple protective controls so that failure of one control does not fully expose the application or its data. In software quality engineering, this may include input validation, authentication, authorization, secure configuration, encryption, logging, monitoring, error handling, and secure coding practices. Depending on obscurity is not a sound security principle because hidden design details should not be the main protection for sensitive information. Complex security mechanisms can increase error risk and should usually be avoided unless justified. Intrusion detection may be useful, but the broad OWASP principle represented in the options is layered defense. Therefore, using defense in depth is correct.

================