These distinct network segments are there to limit damage during a breach. If one fails and the bad actors enter, the theory is that the remainder of the network will stand strong.

It is a good strategy, but it may not be infallible. The segments are there to limit damage during a breach. If one is penetrated, the others remain afloat - unless the equivalent of a cyber-iceberg is unleashed.

At the moment, cybercriminals gaining enter to one segment can cause damage there. But they are learning ways to infiltrate the other segments once they have established a beachhead in the initial segment. Still, segmentation is an important safeguard and will at least slow the bad actors down considerably, perhaps giving security enough time to prevent further encroachment once the initial breach is uncovered.

Read More ...