Network Security Should Be Tested as a System Property
Network security is usually implemented as configuration but experienced as behavior. A firewall rule, segmentation policy, VPN setting, routing table, identity condition, and intrusion-prevention control can all be individually correct while the resulting system still allows an unintended path.
