Physical Security By Pallavi Wankhede ISQS 6342 Physical

Physical Security By Pallavi Wankhede ISQS 6342

Physical Security Sub-divisions of Physical Security Means of implementing physical security Merits and demerits of different physical security measures Importance of Physical Security

Sections of Physical Security Physical Controls Technical Controls

Physical Controls Location Construction Physical Barriers Physical Surveillance

Technical Controls Personal Access Controls Technical Surveillance Ventilation Power Supply Fire Detection and Suppression Shielding Natural Disasters

Physical Controls Location and Environment Ø Visibility Ø Accessibility Ø Propensity for Environmental Problems

Physical Controls Construction Ø Composition of construction materials Ø Evaluation of fire rating Ø Security of doors Ø Load and weight bearing ratings of the ceilings Ø Location of water and gas lines valves Ø Location of fire detection and suppression devices

Physical Controls Physical Barriers can be employed in the form of locks and alarms Locks Preset Locks Cipher Locks Biometric Locks Multicriteria Locks Device Locks

Preset and Cipher locks Preset Locks Ø Key and Knob combinations Ø Least Secure Cipher Locks Ø Programmable Ø More Expensive Ø More secure and flexible

Cipher Locks Cipher lock card reader Cipher lock keypad Reads swiped keycard Reads entered numerical combinations

Options offered by Cipher Locks Ø Door Delay – Alarm triggered if door is held or propped open for long Ø Key override – Combination can be set into lock to be used during emergency or for supervisory needs Ø Master Keyring – Allows supervisors to change access codes and other features Ø Hostage Alarm – Hostaged employee can enter specific code to notify security personnel

Biometric Locks Biometric Systems Fingerprints Palm prints Hand Geometry Eye Scans Signature Dynamics Voiceprints

Biometric Systems Fingerprints and palm prints l Ridges and swirls scanned by an optical scanner and compared to an archival file of fingerprints Hand Geometry l Length and width of hand fingers scanned by the optical scanner and compared to archival data

Biometric Systems Eye scans Retinal scans l Iris scans l Signature Dynamics and Voiceprints Motions performed when signing observed l Inflection, pitch and intonation of one’s voice used l

Fooling biometric techniques Ø Exhibit false positive and false negative identifications Ø Use of gummy fingers Ø Signature forgery DNA Analysis is a more promising method for ensuring security

Multicriteria and Device Locks Multicriteria Locks l Combine strength of two or more locks l Example : specific key/card, thumb print and PIN number or password Device Locks l Used to secure computer hardware and network devices l Example : cable locks, switch controls, slot locks, port controls, cable traps, etc

Cable Lock consists of a vinyl coated steel cable that attaches PCs. laptops, printers, etc to stationary objects Compu. Lock is a versatile system which not only prevents unauthorized access to the interior of the computer case, but also the common theft of the mouse and keyboard

Ø Drive lock prevents unauthorized use of 3. 5" and 5. 25" floppy drives, CD-recorders and players, tape streamers and removable drives. Ø It prevents accidental or intentional insertion or removal of floppy disk, CD-ROM, etc.

This type of lock will help prevent your PC's or server's processor chip, memory chips and other internal components from being stolen

Other Physical Barriers Fencing Control access to entrances l Cost Benefit analysis required l Lighting Use of flood lights, street lights, etc l Used to deter intruders l Provide safe environment for personnel l

Physical Surveillance Various intrusion detection systems and physical protection measures require human action. Security guards can patrol facilities while guard dogs with refined sense of smell and hearing can be used to detect intruders.

Technical Controls Personnel Access Controls Ø Password or PINs Ø Identification cards Ø Biometric Systems Ø Social Engineering Attack Ø Piggybacking

Password and PINs Use of cipher locks needs users to enter password or personal identification number (PIN) A potential attacker could easily watch an authorized user entering his personal information into the keypad and gain entry later

Identification cards Ø Safeguard against unauthorized use Ø Use of smart card Ø Proximity readers User Activated – transmission of sequence of values to reader Ø System Sensing – no action required to gain access Ø

Technical Surveillance Camera monitoring System More prevalent l Camera records activity within critical areas l Allows security personnel to assess whether area is compromised upon or not l

Ventilation and Power Supply Positive pressurization l Ventilation technique that forces air outward from a facility to help guard against dust and other pollutants Protection against Power Failure l Uninterruptible power supply (UPS) Standby systems l Online systems l l Backup sources such as generator

Fire Detection and Suppression Type of Fire Elements of Fire Suppression Method Common combustibles Wood, paper, etc Water or soda acid Liquid Petroleum Products and coolants Halon (or replacement) gas, CO 2 or soda acid Electrical equipment and wiring Halon (or replacement) gas or CO 2

Shielding & Natural Disasters Ø Surrounding the devices/ wires with metallic shielding can suppress the stray electronic signals Ø Common, Cost effective Ø If facility and surrounding area is susceptible to natural disasters, locate elsewhere else ensure safeguards such as flood drainage, lightning rods, reinforced building, etc.

Importance of Physical Security Ø Physical security measures protect the computer from climate conditions, as well as from intruders who use or attempt to use physical access to the computer to break into it.

PC Security Assistance National Computer Security Center ATTN: C 42 9800 Savage Rd. Ft. Meade, Md. 20755 - 6000

References Security+ In Depth – Paul Campbell, Ben Calvert and Steven Boswell Networking Services and Information Technology – The University of Chicago “PC Data Is Vulnerable To Attack, ” PC Vol 4 Number 15, July 23, 1985, pp 33 -36. Department of Defense Trusted Network Evaluation Criteria, 29 July 1985, Draft. Personal Computer Security Considerations (National Computer Security Center) December 1985, NCSC -WA-002 -85 www. gunlockinfo. com http: //www. compelson. com/locks. htm www. extremetech. com www. techtv. com