[Point 1] Complements existing security solutions such as EDR

• A "proactive" zero trust solution: Microsegmentation


• Ransomware countermeasures tend to focus on "post-event measures," but by taking "pre-event measures," it is possible to maximize the effectiveness of post-event measures.

Reference: Ransomware attack scenario test comparison with and without EDR/Illumio implementation (Bishop Fox)

[Point 2] Suppressing lateral movement through more detailed segmentation (microsegmentation)

• The more possible communication paths, the greater the chance of infection spreading and the more subjects there are to investigate in the event of an incident.


• By achieving segmentation at finer units (microsegmentation), the spread of infection through lateral movement can be minimized.

[Point 3] "Host"-based segmentation becomes mainstream

• Segmentation is moving away from traditional network devices and towards "host"-based solutions


• Microsegmentation can be achieved without changing the existing network configuration

The Leader in Host-Based Segmentation: Illumio