1

I have been doing a bit of research on SDP (Software Defined Perimeter) but it's still a bit unclear to me how it protects against certain types of attacks.

On Wikipedia it says that it can protect against these attacks:

  • cross-site scripting (XSS)
  • cross-site request forgery (CSRF)

And many others. But I am just wandering for these two.

If I understand SDP correctly it's a way to controller specific access to specific services/servers/etc for a user.

So how does it help against XSS and CSRF attacks?

1

SDP is a closed VPN solution replacing traditional VPN services like (MPLS, VPN concentrator, etc). The typical enterprise use case eliminates below pain points:

  • Leave their applications open to the Internet
  • Create an in-office VPN concentrator
  • Implement basic firewalling
  • Build their own VPN gateways
  • Pursue a traditional corporate VPN service

You may refer a commercial SDP solution at: https://www.perimeter81.com/software-defined-perimeter-enterprise

In my opinion, claim of getting rid of DDoS, XSS and CSRF are coming form the nature of not opening Enterprise applications to internet (users can connect through SDP with proper controls).

But this may not be applicable for services offered through internet (like eCommerce).

  • So the user is not accessing the rest of the Internet at the same time? How can an SDP stop a user from clicking on a link in a malicious email or rather recognize that the link being open by the user was an accident (so a CSRF)? It has it's own browser? I am still unsure about that part (the same for XSS). Those attacks don't seem preventable unless you modify the code of the applications themselves to prevent CSRF and XSS. – jnbdz Sep 3 '18 at 16:57
  • There are no single control can protect from threats. It's always recommended to have multiple controls to mitigate risks... – Sayan Sep 5 '18 at 15:29

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.