软件定义边界架构指南（英文版）
软件定义边界（SDP）工作组
2014年4月
Abstract
Information security presents such critical challenges to today’s enterprises and governmental institutions that we must all adopt more effective approaches to securing our organizations’ data assets. The Software-Defined Perimeter (SDP) approach can give security professionals in organizations the tools they are seeking to provide a strong, adaptable, and manageable foundation for robust development, operations and security. We hope this document provides security professionals with a better understanding of how SDP architecture works and how it can be deployed into their unique situations. However, our job is not done. We have more topics to cover in future research, including papers on each of the discrete SDP deployment models and integrations presented above, plus elaboration of the benefits of SDP for various businesses, compliance controls mapping tools based on SDP deployments, and many other publication goals. Most importantly, we recognize that we do not have all the answers! We invite you to join our SDP Working Group to engage in the conversation and offer your contributions. As security professionals who support a secure, open, and available Internet, and as ethically motivated human beings, we are working hard to secure a better future. We hope you’ll join us on this journey.
OVERVIEW
9
SDP Architecture
13
SDP Alternatives
23
SDP and Your Enterprise
25
Conclusion
36
更多下载查看
