Networks & Defense
Network Segmentation
Also: segmentation, network zones, VLAN separation
Dividing a network into zones and allowing traffic between zones only where it is needed.
In more detail
A segmented network might separate public web servers, application servers, databases and office laptops, with narrow rules between them. A breach in one zone then reaches only what the rules allow, which limits blast radius and makes unexpected traffic between zones a clean signal for detection.
