Physical Security

Protecting what matters most…

Manasdeep(manasdeeps@gmail.com)

#whoami

• Information Security Consultant

• Interested in Compliance and Penetration Testing

• Have a flair in writing for Information Security

• Like to learn and demonstrate latest security attack vectors and technologies

Agenda

• Physical Security and its need

• Protecting what matters most

• Things to watch out for – Threats and Vulnerabilities

• Methodology - How to protect what matters

• Demo – Do you walk the talk??

Physical Security – Where is it?

Physical Security – What is at stake?• Nothing should impede “life safety goals.”• Safety: • Deals with the protection of life and assets against fire, natural

disasters, and devastating accidents.• Security:• Addresses vandalism, theft, and attacks by individuals.

• Physical security, should be based on a layered defense model.

• Layers must be implemented at the perimeter and moving towards an asset.

• Layers include: Deterrence, Delaying, Detection, Assessment, Response

Physical Security – How to Plan?• Careful and proper design of a physical environment can reduce

crime by directly affecting human behavior• Natural Access Control : Guidance at entry and exit points• Natural Surveillance : Maximizing visibility• Territorial Reinforcement : Physical designs that highlight ownership

• Facility Selection• Visibility (terrain, population)• External factors (crime rate, first responder locations)• Accessibility (road access, traffic, proximity to transportation services)• Probability of Natural Disasters (floods, earthquakes)

• Safeguards: • Mantraps to disallow piggybacking • Fail safe design• Fail secure design

Physical Security – Its all in the design

Methodology – How to protect what matters

Defense in Depth

Methodology – Control Flow

Physical Security – Threats

How much to invest?

Do you walk the talk??

DEMO

THANK YOU !!

- Manasdeephttp://reflect-infosec.blogspot.in/

https://twitter.com/manasdeep

https://in.linkedin.com/in/manasdeep