Cad iad na prionsabail ríthábhachtacha de ailtireacht dhíoghlain?

Question

Accepted Answer

Baineann dearadh **ailtireacht dhíoghlain** a bheith ag struchtúrú córais le prionsabail dhíoghlain ionsuite ann — **cosaint i ndomhain**, **príobhilíoid ar a laghad**, **muinín nialasach**, **réamhshocruithe slán**, agus níos mó. Treorú a thugann na prionsabail seo ar chorais a thógáil atá seasmhach in aghaidh ionsaí trí dhearadh.

## Prionsabail bhunúsacha dhíoghlain

```text
DEFENSE IN DEPTH → multiple LAYERS of security (network, app, data, etc.) → no single
  point of failure; if one layer fails, others still protect
LEAST PRIVILEGE → every component/user gets the MINIMUM access needed → limits blast radius
ZERO TRUST → "never trust, always verify" → don't trust based on network location;
  authenticate/authorize every request (vs old "trusted internal network" model)
SECURE DEFAULTS → secure out of the box (closed by default, opt-in to open)
FAIL SECURELY → on failure, default to a SAFE/denied state (not open)
```

## Cleachtais dhíoghlain ailtireachta

```text
✓ SEGMENTATION → isolate components/networks (limit lateral movement if breached)
✓ MINIMIZE ATTACK SURFACE → expose only what's necessary; fewer entry points
✓ SEPARATION of concerns / trust boundaries → clear boundaries; validate across them
✓ ENCRYPT data in transit and at rest; secure secrets management
✓ Centralize security controls (auth, logging) where sensible; secure the perimeter AND interior
✓ MONITORING/logging → detect and respond to incidents (you can't stop everything)
```

## Fáth a bhfuil na prionsabail tábhachtach

```text
✓ Security built into the DESIGN (not bolted on) → far more effective and cheaper
✓ Resilient → assume breaches happen; limit damage, detect, recover (defense in depth)
✓ These principles guide consistent, sound security decisions across the system
→ Secure architecture makes the whole system harder to compromise and damage harder to spread.
```

## Fáth a bhfuil sé tábhachtach

Tá sé tábhachtach a thuiscint go bhfuil na príomhphrionsabail de ailtireacht dhíoghlain ina eolas ar leibhéal sinsearach toisc **gur gá go mbeadh díoghlain tógtha isteach i ndearadh an chórais**, agus treorú a thugann na prionsabail seo ar chorais a chruthú atá seasmhach in aghaidh ionsaí, agus dá bhrí sin tá sé luachmhar do ailtireachta córas díoghlain.

Meallann ailtireacht dhíoghlain struchtúrú córais le díoghlain deartha ann, agus is iad na **prionsabail bhunúsacha** an bhunús: **cosaint i ndomhain** (iliomad sraithe slándála ionas nach bhfuil aon fhallain amháin tubaisteach — má théann sraith amháin i bhfeidhm, cosnaíonn daoine eile), **príobhilíoid ar a laghad** (rochtain ar an íosmhéid is gá do gach comhpháirt agus úsáideoir, ag theorannú an raidiuس gealadh), **muinín nialasach** (