An Enterprise View of Software Defined Perimeter

By Jim Reavis, Co-founder and CEO, Cloud Security Alliance

As cloud computing and unmanaged endpoints continue to gain traction, it is a foregone conclusion that information security technical controls must become more virtual - that is to say, software-based. Rapidly disappearing are the days of physical perimeters and hardwired network architectures. One of Cloud Security Alliance's most promising research projects, Software Defined Perimeter (SDP), looks to accelerate the implementation of virtual controls to make organizations more secure without losing the agility cloud and mobility offer. SDP is inspired by the military's classified, "need to know" network access model. SDP provides the blueprint for an on-demand, point-of-use security perimeter with a tremendous number of interesting security use cases. The linked slide deck is a presentation about SDP from Kirk House, who is an SDP Working Group leader as well as Global Director, Enterprise Architecture at The Coca Cola Company. Kirk's presentation provides an enterprise view of how we need to rethink security with SDP. By starting with zero trust, the ability to achieve application segmentation, eliminate a wide variety of intermediate attack vectors and achieve greater overall security is compelling. Software Defined Perimeter is coming to you soon, and I hope you will take the time to learn more about it.