Physical Security

Question 1

Video surveillance

Answer 1

• CCTV (Closed circuit television)
  
  • Can replace physical guards
• Camera properties are important
  
  • Focal length - Shorter is wider angle
  • Depth of field - How much is in focus
  • Illumination requirements - See in the dark
• Often many different cameras
  
  • Networked together and recorded over time
• Can provide notification of activity
  
  • Motion detection

Question 2

Asset tracking tags

Answer 2

• A record of every asset
• Routers, switches, cables, fiber modules, CSU/DSUs,
etc.

• Financial records, audits, depreciation
• Make/model, configuration, purchase date, location,
etc.

• Tag the asset
  
  • Barcode, RFID, visible tracking number

Question 3

Tamper detection

Answer 3

• You can’t watch all of your equipment all of the time
  
  • Have your systems monitor themselves
• Hardware tampering
  
  • Case sensors, identify case removal
  • Alarm sent from BIOS
  • Firewalls, routers, etc.
• Foil asset tags
  
  • Identify the tampering

Question 4

Identification badges

Answer 4

• ID badge
  
  • Picture, name, other details
  • Must be worn at all times
• May be integrated with door access or a smart card
  
  • It’s more than just a visual identification

• Standardized format
• Train all employees to look for ID and ask questions
if they don’t see one

Question 5

Biometrics

Answer 5

• Biometric authentication
  
  • Fingerprint, iris, voiceprint

• Usually stores a mathematical representation of your
biometrics
• Your actual fingerprint isn’t usually saved

• Difficult to change
  
  • You can change your password
  • You can’t change your fingerprint
• Used in very specific situations
  
  • Not foolproof

Question 6

Tokens and cards

Answer 6

• Smart card
  
  • Integrates with devices
  • May require a PIN
• USB token
  
  • Certificate is on the USB device
• Hardware or software tokens / key fobs
  
  • Generates pseudo-random authentication codes
• Your phone
  
  • SMS a code to your phone

Question 7

Door access controls

Answer 7

• Conventional
  
  • Lock and key
• Deadbolt
  
  • Physical bolt
• Electronic
  
  • Keyless
• Token-based
  
  • Magnetic swipe card or proximity reader
• Multi-factor
  
  • Smart card and PIN