Copyright © 2026 Authors retain the copyright of this article. This article is an open access article distributed under the Creative Commons Attribution License which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.

@article{203708,
        author = {Km. Tarannum and Prof. Dr. Yashpal Singh},
        title = {Network Segmentation and Zero-Trust Architecture for Ransomware Containment: A Framework-Based Analysis},
        journal = {International Journal of Innovative Research in Technology},
        year = {2026},
        volume = {13},
        number = {1},
        pages = {115-120},
        issn = {2349-6002},
        url = {https://ijirt.org/article?manuscript=203708},
        abstract = {Ransomware attacks become highly destructive when attackers are able to move laterally across organizational networks. A single compromised endpoint can become the starting point for a large-scale attack if the network is flat, poorly monitored, and weakly segmented. Flat networks allow attackers to access file servers, databases, identity systems, administrative consoles, backup repositories, and critical applications after compromising one device or account. Network segmentation and Zero-Trust Architecture offer a strong defence by creating controlled boundaries, limiting unnecessary communication, enforcing continuous verification, and reducing implicit trust.
This paper examines the role of network segmentation and Zero-Trust Architecture in ransomware containment. The study is exploratory, conceptual, and framework-based. It reviews literature related to ransomware attack lifecycle, lateral movement, network security, micro-segmentation, Zero-Trust principles, identity-centric security, and incident response. The paper explains how segmentation reduces ransomware blast radius, protects critical assets, supports emergency isolation, and strengthens recovery infrastructure. It also explains how Zero-Trust principles such as least privilege, continuous verification, device posture assessment, conditional access, and identity-based controls enhance segmentation effectiveness.
The paper concludes that network segmentation should not be treated merely as a technical network design method. It should be understood as a ransomware resilience strategy. When integrated with Zero Trust, segmentation helps organizations contain ransomware spread, protect critical systems, preserve recovery capability, and reduce operational disruption.},
        keywords = {Network segmentation, Zero Trust, ransomware containment, micro-segmentation, lateral movement, cyber resilience, access control.},
        month = {June},
        }