Abstract
Network segmentation is a foundational enterprise security control. Despite its recognized benefits, segmentation initiatives frequently fail in practice, and the field lacks a systematic empirical explanation for why these projects do not achieve their intended outcomes. This paper presents an empirical study of failed segmentation projects based on a survey of 400 U.S.-based\ network security practitioners. The survey was grounded in a two-part failure framework that separately measures general IT project failure factors and segmentation-specific technical and operational barriers. Clustering analysis of the responses reveals four distinct failure archetypes, ranging from projects in which every factor contributed simultaneously to projects where governance was comparatively better but specific segmentation challenges proved decisive. The archetypes correspond to real differences in how segmentation was attempted: projects that included campus networks were more likely to experience the broadest or most technically intense failures. On the other hand, the archetypes did not differ significantly by workload type.
本页仅发布可检索的书目信息与作者摘要。HTML 正文、PDF 和 LaTeX 源文件是独立阅读资源，不作为搜索引擎落地内容。打开页面后会按浏览器语言自动翻译标题与摘要，并写入缓存。