1. Do not connect a router to the VLAN.
2. If you have a VLAN interface, simply don't give it an ip address. Or, don't configure the VLAN int in the first place.
3. If you have to have a router or VLAN interface connected into this VLAN then use ACLs to block all traffic in/out as necessary. Or a little less secure, don't allow the routing protocols to advertise the subnet. Again this is if you have to have a routed interface in that subnet to begin with.