Network Segmentation
Dividing a computer network into smaller isolated sections to limit how far an attacker can move if one part is compromised.
Network segmentation↗ is the practice of dividing a larger network into smaller, isolated sections, so that systems in one segment can't freely communicate with systems in another unless explicitly allowed. Each segment can then have its own security controls tailored to what it holds, like customer payment data or industrial equipment.
The main benefit is containment: if an attacker compromises one device or segment, segmentation stops them from moving freely across the rest of the network, a technique known as lateral movement↗. It's a core part of the defense-in-depth strategy used to protect sensitive systems like finance databases or manufacturing controls.