Users are never implicitly reliable. Whenever a user tries to entry a source, they need to be authenticated and authorized, regardless of whether They are presently on the organization network. Authenticated consumers are granted the very least-privilege entry only, and their permissions are revoked when their endeavor is done. https://www.researchgate.net/publication/365308473_Development_of_Cyber_Attack_Model_for_Private_Network