Beginner talk physical security - manasdeep
This document discusses physical security and protecting important assets. It outlines the need for physical security to deal with threats like vandalism, theft, and attacks. Physical security should use a layered defense model with layers implemented at the perimeter and moving towards assets to provide deterrence, delay, detection, assessment, and response. When planning physical security, careful facility selection and design can guide access, maximize visibility, and reinforce ownership through natural access control, natural surveillance, and territorial reinforcement. The methodology discussed uses a defense in depth approach with control of access flows. Threats to physical security are also addressed, and the document concludes with a demonstration of effective physical security.
Beginner talk physical security - manasdeep
- 1. Physical Security Protecting what matters most… Manasdeep (manasdeeps@gmail.com)
- 2. #whoami • Information Security Consultant • Interested in Compliance and Penetration Testing • Have a flair in writing for Information Security • Like to learn and demonstrate latest security attack vectors and technologies
- 3. Agenda • Physical Security and its need • Protecting what matters most • Things to watch out for – Threats and Vulnerabilities • Methodology - How to protect what matters • Demo – Do you walk the talk??
- 4. Physical Security – Where is it?
- 5. Physical Security – What is at stake? • Nothing should impede “life safety goals.” • Safety: • Deals with the protection of life and assets against fire, natural disasters, and devastating accidents. • Security: • Addresses vandalism, theft, and attacks by individuals. • Physical security, should be based on a layered defense model. • Layers must be implemented at the perimeter and moving towards an asset. • Layers include: Deterrence, Delaying, Detection, Assessment, Response
- 6. Physical Security – How to Plan? • Careful and proper design of a physical environment can reduce crime by directly affecting human behavior • Natural Access Control : Guidance at entry and exit points • Natural Surveillance : Maximizing visibility • Territorial Reinforcement : Physical designs that highlight ownership • Facility Selection • Visibility (terrain, population) • External factors (crime rate, first responder locations) • Accessibility (road access, traffic, proximity to transportation services) • Probability of Natural Disasters (floods, earthquakes) • Safeguards: • Mantraps to disallow piggybacking • Fail safe design • Fail secure design
- 7. Physical Security – Its all in the design
- 8. Methodology – How to protect what matters Defense in Depth
- 9. Methodology – Control Flow
- 10. Physical Security – Threats
- 11. How much to invest?
- 12. Do you walk the talk?? DEMO
- 13. THANK YOU !! - Manasdeephttp://reflect-infosec.blogspot.in/ https://twitter.com/manasdeep https://in.linkedin.com/in/manasdeep