There is this idiotic notion that any security measure that cannot stand on its own is "security by obscurity", and therefore useless. That principle is taught

There is this idiotic notion that any security measure that cannot stand on its own is "security by obscurity", and therefore useless. That principle is taught in school and echoed by every junior netsec professional out there. After almost 20 years of work, I can say that these layered techniques, are invaluable. OF COURSE, the core security has to be bulletproof. But once you've covered that base, there is an enormous value in keeping your assets under the radar. At the very least, it reduces the number of alerts you need to review by several orders of magnitude. Logs become READABLE.