Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

In one of the buildings I work in, there are lawyers and accountants, web developers and marketers, and numerous other small businesses. Everyone's (shared) internet is routed through the same server room (which doubles as a broom closet), which is left unlocked and could be accessed by the public during working hours.

This seems to me to be a ridiculous security risk, but I don't know exactly how to quantify that to the building owner and/or the businesses at risk.

Exactly what sorts of risks are we facing and what danger are we in?

share|improve this question
add comment

2 Answers

  1. I can just walk in, plug something similar to this into your network and read the unencrypted network traffic of the entire building.

  2. I can snip a few cables and cause a denial-of-service for multiple businesses. This will be pretty hard to diagnose if the building does not have a network admin on hand to deal with such issues.

  3. I can steal all the networking equipment.

There is a whole bunch of things I can think of but it would be pointless to list them all. Locking the server room isn't that difficult..

share|improve this answer
    
The first thing there is what I was thinking most of. Law firms and accounting offices are sharing lots of private stuff. –  Dan Gayle Jun 14 '13 at 4:24
1  
"Steal all the networking equipment" is a good reason to tell the building owner if they also own the server equipment. :) –  anorton 13 hours ago
add comment

All of Terry Chia's points are exactly the concerns. On how to quantify the risk to your management; you could try to convince your management to hire a pentester. I'm surprised that the legal folk don't have a problem with leaving a port hole to their sensitive legal data open.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.