A security team wants to detect attackers who have already breached the perimeter and are attempting to move laterally through the internal network. They deploy a decoy server that mimics a vulnerable database host, containing fake data and no legitimate business use, and configure alerts on any connection attempts to it. Which security concept does this describe?