Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental)...
-
Upload
erika-maxwell -
Category
Documents
-
view
219 -
download
0
Transcript of Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental)...
![Page 1: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/1.jpg)
Dr. Bhavani ThuraisinghamThe University of Texas at Dallas (UTD)
June 2011
Physical (Environmental) Security
![Page 2: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/2.jpg)
Domain Agenda• Site and Facility Design Criteria• Perimeter Security • Building and Inside Security• Secure Operational Area
![Page 3: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/3.jpg)
Site Location Considerations• Emergency services• Hazards/ threats• Adjacency
![Page 4: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/4.jpg)
Threats to Physical Security• National / environmental• Utility systems• Human-made/ political events
![Page 5: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/5.jpg)
Threat Sources and ControlsThreat
• Theft• Espionage• Dumpster diving• Social engineering• Shoulder surfing• HVAC access
Controls• Locks• Background checks• Disposal procedures• Awareness• Screen filters• Motion sensors in
ventilation ducts
![Page 6: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/6.jpg)
Domain Agenda• Site and Facility Design Criteria• Perimeter Security • Building and Inside Security• Secure Operational Area
![Page 7: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/7.jpg)
Perimeter and BuildingBoundary Protections
• First line of defense• Protective barriers
– Natural– Structural
![Page 8: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/8.jpg)
Fences• Federal, state or local codes may apply• Parking should not be allowed near fences
![Page 9: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/9.jpg)
Controlled Access Points• Gates are the minimum necessary layer• Bollards
![Page 10: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/10.jpg)
Perimeter Intrusion Detection Systems• Detect unauthorized access into an area
– Electronic ‘eyes’
• Note that some perimeters IDSs can function inside the perimeter as well.
![Page 11: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/11.jpg)
Types of Lighting• Continuous lighting• Trip lighting• Standby lighting• Emergency exit lighting• Emergency egress lighting
![Page 12: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/12.jpg)
Access and Visitor Logs and More Rigorous forms of Logging
ABC CompanyEntrance:___________________ Date:________________
Name Institution Name of Person VisitingTime In Time
Out
![Page 13: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/13.jpg)
Closed Circuit Television (CCTV)• CCTV Capability Requirements
– Detection– Recognition– Identification
• Mixing Capabilities• Virtual CCTV Systems
![Page 14: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/14.jpg)
Guards and Guard Stations• Guards
– Deterrent– Possible liability
• Guard stations
![Page 15: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/15.jpg)
Domain Agenda• Site and Facility Design Criteria• Perimeter Security • Building and Inside Security• Secure Operational Area
![Page 16: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/16.jpg)
Doors• Isolation of critical areas• Lighting of doorways• Contact devices• Guidelines
![Page 17: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/17.jpg)
Building Entry Point Protection• Locks• Lock components
– Body– Strike– Strike plates– Key– Cylinder
![Page 18: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/18.jpg)
Types of Locks• Something you have – Keyed• Something you know – Combinations• Something you are - Biometric
![Page 19: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/19.jpg)
Lock Attacks• Lock picking• Lock bumping
![Page 20: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/20.jpg)
Lock Controls• Lock and key control system• Key control procedures• Change combinations• Fail
– Soft– Secure– Safe
![Page 21: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/21.jpg)
Other Electronic Physical Controls• Card access• Biometric access methods
![Page 22: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/22.jpg)
Windows and Entry Points• Standard plate glass• Tempered glass• Acrylic materials• Polycarbonate windows• Entry points
![Page 23: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/23.jpg)
Intrusion Detection Systems (IDS)• Closed circuit television• Sensors and monitors
![Page 24: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/24.jpg)
Escorts and Visitor Control• Visitor access control best practices
– Picture identity– Photographs– Enclosed area– Authorized escort
![Page 25: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/25.jpg)
Access Logs• Computerized log• Closed circuit TV
![Page 26: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/26.jpg)
Domain Agenda• Site and Facility Design Criteria• Perimeter Security • Building and Inside Security• Secure Operational Area
![Page 27: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/27.jpg)
Equipment Room• Perimeter enclosure• Controls• Policy
![Page 28: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/28.jpg)
Data Processing Facility• Small devices threat• Server room• Mainframes• Storage
![Page 29: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/29.jpg)
Communications and Power• Wireless access points• Network access control• Utility and power rooms
![Page 30: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/30.jpg)
Work Area• Operators• System administrators• Restricted work areas
![Page 31: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/31.jpg)
Equipment Protection• Inventory• Locks and tracing equipment• Data encryption• Disabling I/O ports
![Page 32: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/32.jpg)
Environmental Controls
System• Electric power• HBAC• Water / plumbing• Gas• Refrigeration
Threat• Loss of power• Overheating• Flood / dripping• Explosion• Leakage
![Page 33: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/33.jpg)
Fire Protection• Prevention – reduce causes• Detection – alert occupants• Suppression – contain or extinguish
![Page 34: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/34.jpg)
Materials and Suppression Agents
Type Suppression Agents
Common combustibles Water, foam, dry chemicals
Combustible liquids Inter gas, CO2, foam, dry chemicals
Electrical Inert gas, CO2, dry chemicals
Combustible metals Dry powders
Cooking media (fats) Wet chemicals
![Page 35: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/35.jpg)
Flooding Area Coverage• Water – sprinkler systems• Gas – Halon/CO2/Argon systems• Best practices for systems• Portable extinguishers
![Page 36: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/36.jpg)
Types of Electrical Power Faults• Complete loss of power• Power degradation• Interference (noise)• Grounding
![Page 37: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/37.jpg)
Loss of Electrical Power• UPS• Generators• Goals of power• Power controls
![Page 38: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/38.jpg)
Heating Ventilation Air Condition (HVAC)
• Location• Positive pressure• Maintenance
![Page 39: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/39.jpg)
Other Infrastructure Threats• Gas leakage• Water threats
![Page 40: Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security.](https://reader036.fdocuments.net/reader036/viewer/2022062407/56649d215503460f949f6a3a/html5/thumbnails/40.jpg)
Key Performance Indicators• # of physical security incidents detected• # of false positives for biometrics