Kevin left a pretty valid comment to my Are you ready to change your security paradigm blog post:
I disagree that a compromised security zone is game over. Security is built in layers. Those host in a compromised security zone should be hardened, have complex authentication requirements to get in them, etc. Just because a compromised host in a security zone can get at additional ports on the other hosts doesn't mean an attacker will be more successful.
He’s right from the host-centric perspective (assuming you actually believe those other hosts are hardened), but once you own a server in a security zone you can start having fun with intra-subnet attacks.
Read more ...Thanks for reading my news about Compromised Security Zone = Game Over (Or Not?) at my blog Bros Droid if you want too share this article, please put the resource, and if you think this article is very usefully dont forget to bookmark this site with CTRL + D on your keyboard to web browser.
More Articles :
BGP Security draft adopted as IETF workgroup document- VM BPDU spoofing attack works quite nicely in HA clusters
- IPv6 Secure Neighbor Discovery (SEND)
- IPv6 Source Address Validation Improvement
- Compromised Security Zone = Game Over (Or Not?)
Virtual Firewalls Webinar – Longer Than Expected- This is what makes networking so complex
- Virtual Appliance Performance is becoming a non-issue
The Spectrum of Firewall Statefulness- Are you ready to change your security paradigm?