Most networks, despite all of their digital connectedness, are not only flat, but are also built around an “Implicit Trust” philosophy. Because of this, once the perimeter has been breached an attacker is able to gain access to the entire network. This allows full freedom of lateral network movement for intruders to find and compromise assets because there are no mechanisms in place to provide visibility, and channel their Command and Control communications through the non-security aware network of switches and routers without detection.
Security professionals have been complaining about this problem for going on twenty years, along with security basics like reading your log files and patching your devices.
