Blog

Security Research

(Micro)Segmentation from a Practical Perspective

Stiv Kupchik is a Security Researcher Team Lead at Akamai. His research projects revolve around OS internals, vulnerability research, and malware analysis. He has presented his research at conferences such as Black Hat, Hexacon, and 44CON. In addition to being a cybersecurity professional, Stiv also has a BSc in physics.

Introduction

Network segmentation is difficult to implement. No, scratch that. Network segmentation is easy to implement; segmenting the network in a way that doesn’t impact the end user or network operability while making it secure is nigh impossible.

\r\n We (the Akamai Security Intelligence Group researchers) often mention network segmentation as a mitigation strategy for lateral movement and the various other threats we report on — whether it’s in our Patch Tuesday advisories , our malware reports, vulnerability advisories, or other research pieces.

\r\n In this post, we’ll provide practical, concrete…