 Enforcement points, or platforms for executing protections, must then be implemented at the boundaries of the segments to enforce the defined protection logic.Enforcement points may be implemented as network security gateways, host-based software, mobile device applications, or virtual machines in the cloud.The Control Layer is the core of the SDP architecture.