Understanding Network Segmentation Through Breach…

What is Network Segmentation?

Network segmentation involves dividing a computer network into smaller segments to enhance security. Each segment, or subnet, can be managed independently and protected by firewalls and other security measures.

This technique helps in isolating sensitive data and critical systems from less secure parts of the network.

Breach Probability Model

The model uses a Bernoulli trial to simulate repeated phishing attempts at a DMZ gateway. Each attempt has a certain probability of being blocked by security measures.

By observing the convergence of observed block rates on the configured value, users can understand how network segmentation affects overall breach probability.

live demo · related simulation● LIVE

Law of Large Numbers in Action

As more phishing attempts are simulated, the observed block rate tends to stabilize around the expected value due to the law of large numbers.

This phenomenon demonstrates that with a sufficient number of trials, the empirical outcomes closely approximate theoretical probabilities.

Why It Matters

Proper network segmentation can significantly reduce the likelihood of successful breaches by isolating sensitive data and critical systems from external threats.

Understanding breach probability helps in designing more effective security strategies for networks.

Frequently asked questions

What is a DMZ gateway?

A DMZ (Demilitarized Zone) gateway acts as an intermediary between the internet and internal network, providing a layer of protection by filtering traffic before it reaches the internal network.

How does network segmentation improve security?

Network segmentation improves security by limiting the spread of potential threats. By isolating different parts of the network, any breach in one segment is less likely to affect others, thereby reducing overall risk.

What are Bernoulli trials?

Bernoulli trials refer to a sequence of independent experiments with only two possible outcomes: success or failure. In this context, they represent individual phishing attempts that either succeed or fail to breach the network.

How does the law of large numbers apply here?

The law of large numbers states that as the number of trials increases, the observed frequency of an event approaches its theoretical probability. This principle is used to predict and understand the long-term behavior of phishing attempts in the simulation.

Try it live

Everything above runs in your browser — open Purdue Model Network Segmentation: Breach Probability Lab (2D) and change the parameters while it is running. Nothing is installed, nothing is uploaded, the whole model lives in one tab.

▶ Open Purdue Model Network Segmentation: Breach Probability Lab (2D) simulation

Understanding Network Segmentation Through Breach Probability