COMPARATIVE ANALYSIS OF THE EFFECTIVENESS OF NETWORK SEGMENTATION METHODS TO PROTECT AGAINST THE MOVEMENT OF AN ATTACKER IN ISOLATED COMPUTER NETWORKS

The article presents a comparative analysis of network segmentation methods to counteract the lateral movement of intruders in isolated environments. Based on the analysis, the concept of overcoming the systemic limitations of existing network segmentation approaches is proposed. The methodology is based on a critical analysis of the evolution of security paradigms – from traditional virtual local area network and access control list solutions to modern concepts of microsegmentation and zero-trust architecture – using attack chain analytics based on the MITRE ATT&CK framework to evaluate effectiveness against key relocation techniques. As a solution to functional contradictions, the concept of adaptive dynamic segmentation has been developed, integrating a hierarchy of protection levels, a declarative policy ontology, and a mechanism for preventive border orchestration based on threat analytics.