A technique that finely partitions a network to minimize the blast radius of a breach.
A technique that partitions a network into fine-grained segments and individually controls traffic between them, preventing an intrusion from spreading laterally. Unlike traditional VLAN-based segmentation, its software-defined approach can get down to the granularity of an individual workload or application, which is why it's central to modern data-center security, where visibility and control over east-west traffic matter most.
© 2026 ITBGM