De-perimeterisation

De-perimeterisation is a network security strategy that involves the removal of the traditional firewall-based security perimeter in a network. This concept is based on the idea that the traditional perimeter-based security model is no longer effective in a world where network boundaries are increasingly blurred and where attacks can come from both outside and inside the network.

Overview

De-perimeterisation is a term coined by the Jericho Forum, an international IT security thought-leadership group. The concept is based on the recognition that the traditional security perimeter is becoming increasingly ineffective due to the proliferation of mobile devices, remote workers, business partners needing access to internal systems, and the increasing sophistication of cyber threats.

Principles

The principles of de-perimeterisation involve moving away from a single line of defense at the network boundary to multiple lines of defense throughout the network. This includes the use of end-point security measures, encryption, identity management systems, and intrusion detection systems.

Benefits

De-perimeterisation offers several benefits. It allows for more flexible and dynamic business processes, as it enables secure access to network resources from any location. It also provides a more robust security posture, as it does not rely on a single point of failure at the network boundary.

Challenges

However, de-perimeterisation also presents several challenges. It requires a shift in mindset from a focus on perimeter security to a focus on data security. It also requires the implementation of more complex security measures, such as end-point security and encryption.

See also

• Network security
• Firewall (computing)
• Jericho Forum
• End-point security
• Encryption
• Identity management
• Intrusion detection system