The zero-day attacks in this case were published earlier, but not known to the vendor. Is there a way to protect against this?

Please read the following articles and then answer the below questions

https://arstechnica.com/tech-policy/2011/07/how-digital-detectives-deciphered-stuxnet-the-most-menacing-malware-in-history/
https://spectrum.ieee.org/telecom/security/the-real-story-of-stuxnet

Question:
If you were designing security for Natanz, what prevention and detection methods would you recommend?
Iran air-gapped their actual control systems. This causes operational issues and is therefore avoided in all but the highest security environments. Given that it failed anyway, would you still use it? If not, what would you lose by not doing it? If so, how would you detect a compromise of your air-gapped environment?
The zero-day attacks in this case were published earlier, but not known to the vendor. Is there a way to protect against this?

Last Completed Projects