
<p>The bring-your-own device (BYOD) phenomenon and the rise of software-as-a-service has led to an anywhere, anytime workplace in which traditional network demarcations have become irrelevant. Gone are the days when employees came to a physical location and worked at only one wireless workstation, leaving the job inside those four walls at the end of the day. The SDP Initiative is a new CSA project aimed at developing an architecture for securing the new reality of a mobile, virtualized workforce.</p><p>"The premise of the traditional enterprise network architecture is to create an internal network separated from the outside world by a fixed perimeter that consists of a series of firewall functions that block external users from coming in, but allow internal users to get out," explained CSA, in the whitepaper. "Traditional fixed perimeters allowed internal services to remain secure from external threats for a number of years due to the powerful but simple characteristics of blocking visibility and accessibility from outside the perimeter to internal applications and infrastructure. But the traditional fixed perimeter model is rapidly becoming obsolete."</p><p>The newly proposed SDP framework is "pretty disruptive in its approach", said Jim Reavis, executive director of the CSA, when speaking to the audience at last week's CSA Congress in Orlando.</p><p>By incorporating security standards from organizations such as NIST as well as security concepts from organizations such as the US Department of Defense, the group is working to mitigate network-based attacks on Internet-accessible applications by eliminating connectivity to them until devices and users are authenticated and authorized.</p><p><a href="http://www.infosecurity-magazine.com/view/36014/csa-congress-2013-new-framework-provides-disruptive-approach-to-application-security">Keep reading...</a></p>