A security technique that divides a network into small, isolated segments with individual access controls, limiting an attacker's ability to move laterally through the network.