MSDP: A secure and adaptive SDP framework

Software-Defined Perimeter (SDP) provides a logical perimeter to restrict access to services. However, due to the security vulnerability of a single controller and the programmability lack of a gateway, existing SDP is facing challenges. To solve the above problems, we propose a flexible and secure SDP mechanism named Mimic SDP (MSDP). MSDP consists of endogenous secure controllers and a dynamic gateway. The controllers avoid single point failure by heterogeneity and redundancy. And the dynamic gateway realizes flexible forwarding in programmable data plane by changing the processing of packet construction and deconstruction, thereby confusing the potential adversary. Besides, we propose a Markov model to evaluate the security of our SDP framework. We implement a prototype of MSDP and evaluate it in terms of functionality, performance, and scalability in different groups of systems and languages. Evaluation results demonstrate that MSDP can provide a secure connection of 93.38% with a cost of 6.34% under reasonable configuration.