Micro-Segmentation

Definitions

1. A fine-grained security approach that restricts east-west communication between workloads, services, or devices using detailed identity- or policy-based rules rather than broad network zones alone. Micro-segmentation limits blast radius by making lateral movement harder even after an attacker gets inside.

   In plain English: Breaking internal access into very small controlled segments so systems cannot freely talk to each other.

   Example: "The attacker reached one app server, but micro-segmentation prevented direct access to the payment database tier."

Related Terms

• mTLS
• Pass the Hash
• Pass the Ticket
• Zero Trust Architecture
• Demilitarized Zone
• DMZ
• Flat Network
• Jump Box
• Jump Server
• PS Exec