Nowadays, there are many attack vectors an adversary can employ to either break into the system or impact its operations. Oftentimes a successful attack is a clever combination of smaller vectors, which on their own do not seem very important or dangerous. That’s why to efficiently mitigate modern Internet threats the system should be built with the “defense in depth” in mind.

In this presentation we will discuss the various approaches and technical solutions Cloudflare implemented to protect infrastructure and services from the biggest Internet threats. We will review a layered approach to security starting from the Internet itself, then data centre networking, server and operating systems layers, application and service layers. We will see how the Internet today has become the global “security perimeter” and how to protect modern cloud workloads and corporate services.