SlideServe
Télécharger Obtenir Pro
Menu
Accueil Pro
Préférences
ApparenceLight Aide et commentaires
© SlideServe · v2026

Physical Security For System Administrators

khanh avatar
khanh
9 diapositives · 215 Views · Jul 29, 2014

As a system administrator, understanding the importance of physical security is crucial for safeguarding data and assets. This guide covers key concepts, including attack vectors—both electronic and physical—highlighting the necessity for a layered security approach. Explore the significance of facility design, access control, and personnel training to mitigate risks. Learn strategies for securing server rooms and data centers, ensuring robust defenses against unauthorized access. Elevate your security posture by adopting comprehensive measures against both social and physical threats.

Physical Security For System Administrators - slide 1
01 / 9Physical Security For System Administrators
1 / 17

Télécharger la présentation

Physical Security For System Administrators
Une image / un lien ci-dessous est fourni (tel quel) pour télécharger la présentation

Politique de téléchargement : le contenu du site vous est fourni TEL QUEL pour votre information et votre usage personnel ; il ne peut être vendu, concédé sous licence ni partagé sur d’autres sites sans l’accord de son auteur.Le contenu vous est fourni TEL QUEL, pour votre information et votre usage personnel uniquement. Téléchargez la présentation en cliquant sur ce lien. Lors du téléchargement, si vous ne parvenez pas à télécharger une présentation, l’éditeur a peut-être supprimé le fichier de son serveur.Pendant le téléchargement, si vous ne parvenez pas à obtenir une présentation, le fichier a peut-être été supprimé par l’éditeur.

F I N

Plus de contenu associé

Transcription de la présentation

  1. Physical Security For System Administrators John Mark Smotherman

  2. Overview • Think Using Attack Vectors • Electronic Security - attacks from the network • Physical Security - attacks on the physical machine or environment • Electronic security means nothing if they can touch the machine! • Design • Hardened Core • Personnel • Social Attacks

  3. Importance • Why should a future sysadmin care about physical security? • That’s Security’s Job! • Overlap • System Administration/Facilities • Server security/server room security • Input into server room design • Responsibility for security camera feeds • High Security Jobs • Military, Data Warehousing for Companies

  4. Hardened Core • Physical Defense-in-Depth • Multiple checkpoints • Data Centers should be like Ogres • Sectioning and Layering by access • Sole Purpose Rooms • Access Control • Server Room Design • Secure HVAC • No windows • What happens during an emergency, e.g. a fire?

  5. Access • Two- and Three-Factor Security • Something You Have • Something You Are • Something You Know • Electronic Access (Databases) • Separation of Authentication • Requires Multiple Attack Vectors to Break • Differing Keys • Differing Servers

  6. Personnel • Breaches waiting to happen • Tailgating • Cleaning Personnel • Facilities (e.g. HVAC) • Malicious Attacks • How to deal with this? • Training! • Mantrap/Turnstyle • Guards, Escorts

  7. Case In Point • Data Warehouse • Server farm machines or space • Rented out to various companies • Secure Design • What happens when the IBM rep wants access to his machines, and they’re next to the Intel ones? • Intel =  • Importance of Hardened Core and Sole Purpose

  8. The Take-Away • Physical Security Matters! • Hardened Core/Defense In Depth • Casing the Joint • Think like a criminal • Social Attack Vectors Matter Just as Much as Physical and Electronic Ones

  9. Etc. • Van Eck Phreaking • Reading your screen through the wall • Trash • Secure, monitored disposal • Job Descriptions • Don’t let an attack vector go unprotected because you can’t agree who has to do it!