De-perimeterisation: inevitable and essential

✍ Scribed by Alastair Broom

• Publisher: Elsevier Science
• Year: 2009
• Tongue: English
• Weight: 167 KB
• Volume: 2009
• Category: Article
• ISSN: 1353-4858
• DOI: 10.1016/s1353-4858(09)70016-9

✦ Synopsis

Network Security 7 less susceptible to these forms of attack. However, even if these changes were made today, the majority of systems in the wild would not be running them for some time. It may be a decade or more before key systems running on corporate networks have been migrated away from operating systems that employ vulnerable password database systems. The opportunities for password theft at high speed will remain worryingly prevalent.

De-perimeterisation: inevitable and essential

Alastair Broom, UK security line of business director, Dimension Data My business's employees are mobile, our applications are highly interconnected and we use ecommerce platforms, extranets and the web to communicate with suppliers, partners, and customers. So where is the perimeter of my network?

And how do I protect it if I cannot define it?

In 2003, a group of CISOs from global corporations such as BP and ICI set out to answer these questions and in January 2004 they formed the Jericho Forum. Their aim was to determine the best way to enable secure ebusiness in a world without boundaries where the internet is king. They concluded that hard perimeters separating 'secure' corporate networks from 'insecure' public networks, inside from outside, and trusted from untrusted were not conducive to this new way of doing business. So they coined the term 'de-perimeterisation' to reflect a fundamental shift in the way the corporate network in general and network security in particular should be conceptualised, designed, constructed, and managed. With deperimeterisation, the corporate network and the internet are synonymous and the focus for security moves from the network to the data.