Circle
Events
Blog

Download Publication

Software-Defined Perimeter (SDP) Specification v2.0
Software-Defined Perimeter (SDP) Specification v2.0
Who it's for:
  • Security Architects
  • Security Officers
  • Cloud Service Providers
  • Technology Providers

Software-Defined Perimeter (SDP) Specification v2.0

Release Date: 03/10/2022

Working Group: SDP and Zero Trust

The Software-Defined Perimeter (SDP) architecture is an effective way to implement the principles of Zero Trust. SDP aims to give enterprise security architects, network providers, and application owners the ability to deploy dynamic “software-defined” perimeters, hide networks and resources, prevent unauthorized access to the services running on them, and enforce an identity-centric access policy model. This has become critically important given the shift toward the cloud and the ever-heightened threat landscape.

This specification document from CSA’s SDP and Zero Trust Working Group covers the architectural components, interactions, and basic security communications protocol for SDP and is an updated version of the CSA SDP Specification v1.0, published in April 2014. This revised version includes additions, clarifications, and extensions in the following areas:
  • SDP and its relationship to Zero Trust 
  • SDP architecture and components
  • Onboarding and access workflows
  • Single Packet Authorization (SPA) message format, use of UDP, and alternatives
  • Initial discussions on IoT devices and access policies
  • Sequence diagrams for three SDP sub-protocols

Key Takeaways:
  • The definition of SDP and how it works
  • Understanding of the three components of the SDP architecture (Controller, Initiating Hosts, and Accepting Hosts)
  • Overview of six different SDP deployment models
  • Protocols for AH to Controller, IH to Controller, IH to AH, and logging

Download this Resource

LoginCreate Account

Prefer to access this resource without an account? Download it now.

Acknowledgements

Michael Roza Headshot
Michael Roza
Risk, Audit, Control and Compliance Professional

Michael Roza

Risk, Audit, Control and Compliance Professional

Since 2012 Michael has contributed to over 85 CSA projects completed by CSA's Internet of Things, Zero Trust/Software-Defined Perimeter, Top Threats, Cloud Control Matrix, Containers/Microservices, DevSecOps, and other working groups. He has also served as co-chair of CSA's Enterprise Architecture, Top Threats, and Security-as-a-Service working groups while also serving as the Standards Liaison Officer for IoT, ICS, EA, SECaaS, and Cloud Key M...

Read more

Jason Garbis Headshot
Jason Garbis
Chief Product Officer of Appgate, Inc.

Jason Garbis

Chief Product Officer of Appgate, Inc.

Jason Garbis is Chief Product Officer for Appgate, responsible for the company’s security product strategy and product management, and co-chair of the SDP Zero Trust Working Group at the Cloud Security Alliance, where he helps lead research and publication initiatives. He has over 30 years of product management, engineering and consulting experience at security and technology firms, including RSA, where he focused on identity management and...

Read more

Juanita Koilpillai Headshot
Juanita Koilpillai
Founder & CEO of Waverley Labs

Juanita Koilpillai

Founder & CEO of Waverley Labs

Juanita Koilpillai is Founder and CEO of Waverley Labs, a pioneer in software defined perimeters (SDP) and digital risk reduction solutions. She has 30 years’ experience researching and developing systems in computer security, network management and real-time distributed software. She leads the open source software-defined perimeter (SDP) effort for ‘black’ apps in the cloud with the Cloud Security Alliance and is an active contributor to N...

Read more

Junaid Islam Headshot
Junaid Islam
Founder and CTO of Vidder

Junaid Islam

Founder and CTO of Vidder

Junaid Islam is the CTO and founder of Vidder which provides distributed access control solutions to Fortune 500 companies. Prior to founding Vidder, Junaid founded Bivio Networks which developed the first Gigabit speed software based securityin the industry. Earlier in his career Junaid helped create networking standards such as Frame Relay, ATM and MPLS while at StrataCom and Cisco.

In addition to his work in th...

Read more

Bob Flores Headshot
Bob Flores

Bob Flores

Bob Flores is a co-founder and partner of Cognitio. Prior to this, Bob spent 31 years at the Central Intelligence Agency. While at CIA, Bob held various positions in the Directorate of Intelligence, Directorate of Support, and the National Clandestine Service. Toward the end of his career at the CIA, Bob spent three years as the CIA’s Chief Technology Officer where he wa...

Read more

Daniel Bailey Headshot Missing
Daniel Bailey

Daniel Bailey

This person does not have a biography listed with CSA.

Benfeng Chen Headshot Missing
Benfeng Chen

Benfeng Chen

This person does not have a biography listed with CSA.

Eitan Bremier Headshot Missing
Eitan Bremier

Eitan Bremier

This person does not have a biography listed with CSA.

Ahmed Refaey Hussein Headshot Missing
Ahmed Refaey Hussein

Ahmed Refaey Hussein

This person does not have a biography listed with CSA.

Are you a research volunteer? Request to have your profile displayed on the website here.

Interested in helping develop research with CSA?