Network Segmentation

Dividing a network into zones so intruders who get in cannot go everywhere.

Core Principles & Analysis

• Segmentation contains lateral movement — the phase where breaches become catastrophes.
• The 2013 Target breach spread from an HVAC vendor’s access to payment systems on a flat network.
• Micro-segmentation extends the idea to per-workload rules, a pillar of zero-trust designs.