Validating ZTA with attack vectors

ZTA implementations can be validated by creating attack vector reports. These reports give you a visual simulation of the attack vector and path to the specific asset. The following screenshot shows how a PLC may be attacked by navigating connected devices in the path:

Figure 10.8 – An attack vector report

The preceding figure shows the attack vector simulation on an important device, PLC1.

The path from the internet to the PLC can be achieved in three easy steps:

1. Workstation 1 has an internet connection.
2. There are known vulnerabilities on the device that the attacker may leverage to compromise the device.
3. There is network connectivity between two subnets, meaning the attacker may enter another network. Also, there are known vulnerabilities on the PLC device, which may be used to compromise the PLC.

Simulation is an integral part of any cybersecurity program. However, given the sensitivity...