Précis

Whatever we decide an endpoint is, we have to come to grips with the fact that because of technology and how our applications deal with data as a programming language, our security perimeter is constantly changing. For instance, PostScript is really a language for defining how a printer is supposed to render a document on paper. Many applications, such as databases and Web browsers, allow programming commands to be embedded in the data to format or manipulate data.

As devices connect to or leave the network, the perimeter changes, and so our security policy must adapt. There has been talk about the death of the security perimeter, and some have even given it a cool name: deperimeterization.^[1] However, the arguments that they use to make their case also prove my point that the endpoint is the new perimeter.

^[1] www.opengroup.org/projects/jericho/