Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

ABTV //

Malware

5/5/2017
08:00 AM
Curtis Franklin
Curtis Franklin
Curt Franklin
50%
50%

Verizon Hides User Apps With New SDP Service

Verizon offers a new SDP service to enhance customer application security.

You can't hack what you can't find. That's the premise behind Verizon Enterprise Solutions' new Software-Defined Perimeter (SDP) service that uses a cloud architecture to create a virtual perimeter around the sort of enterprise network that knows no physical boundaries.

Verizon says that SDP service provides pre-authenticated, context-aware, secure access to enterprise applications. This means that the cloud-based service is the "public" face of every enterprise application; users must sign in and be authenticated by the SDP, which only then forwards the user transaction to the relevant application.

The concept of the SDP isn't new. It was initially developed from work on an approach known as a "Black Cloud" at the Defense Information Systems Agency in the mid- to late-2000s. Because all user authentication must go through the SDP, all DNS and IP address information for the application can be hidden from public view. This approach is an operational definition of "security through obscurity," a tactic that has its detractors but is widely used in military and enterprise applications.

Verizon SDP service is part of the broader portfolio of virtualized security services available from Verizon. The service includes, in addition to application authentication and obfuscation functions, a perimeter firewall, VPN termination and public key infrastructure (PKI) for the customer. (See Unknown Document 732479.)

Verizon SDP has begun its rollout, and is currently available in the US, Canada, EU countries and Norway.

— Curtis Franklin, Security Editor, Light Reading. Follow him on Twitter @kg4gwa.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Commentary
How SolarWinds Busted Up Our Assumptions About Code Signing
Dr. Jethro Beekman, Technical Director,  3/3/2021
News
'ObliqueRAT' Now Hides Behind Images on Compromised Websites
Jai Vijayan, Contributing Writer,  3/2/2021
News
Attackers Turn Struggling Software Projects Into Trojan Horses
Robert Lemos, Contributing Writer,  2/26/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win an Amazon Gift Card! Click Here
Latest Comment: Sure you have fire, but he has an i7!
Current Issue
2021 Top Enterprise IT Trends
We've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
Flash Poll
How Enterprises are Developing Secure Applications
How Enterprises are Developing Secure Applications
Recent breaches of third-party apps are driving many organizations to think harder about the security of their off-the-shelf software as they continue to move left in secure software development practices.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-25344
PUBLISHED: 2021-03-04
Missing permission check in knox_custom service prior to SMR Mar-2021 Release 1 allows attackers to gain access to device's serial number without permission.
CVE-2021-25345
PUBLISHED: 2021-03-04
Graphic format mismatch while converting video format in hwcomposer prior to SMR Mar-2021 Release 1 results in kernel panic due to unsupported format.
CVE-2021-25346
PUBLISHED: 2021-03-04
A possible arbitrary memory overwrite vulnerabilities in quram library version prior to SMR Jan-2021 Release 1 allow arbitrary code execution.
CVE-2021-25347
PUBLISHED: 2021-03-04
Hijacking vulnerability in Samsung Email application version prior to SMR Feb-2021 Release 1 allows attackers to intercept when the provider is executed.
CVE-2021-25348
PUBLISHED: 2021-03-04
Improper permission grant check in Samsung Internet prior to version 13.0.1.60 allows access to files in internal storage without authorized STORAGE permission.