The protection of personnel, hardware, programs, networks, and data from physical circumstances and events.
0
votes
0answers
60 views
how to program my own TOKEN using atmega64 [closed]
I'm trying to create a sample security token with Atmega64, And now i'm a little confused about how to program that. As it mentioned in PKCS11 Document token hardware should support about 70 function.
...
2
votes
3answers
452 views
is it possible to create a login “key” out of a USB drive?
I was recently thinking about keeping my computer secure from physical access, and i decided that the safest way to keep my data under lock and key, was to do just that: Create a lock and key out of a ...
0
votes
0answers
124 views
How to set up VLAN network [closed]
I am designing my network to improve security and want to implement Vlans. My problem is that we already have a network 192.168.16.0/24 and have a lot of devices on this network already. From theory, ...
6
votes
3answers
124 views
Securing mail deliveries in a multi-tenant office building
I am concerned that that postal mail (and other deliveries not requiring a signature) may be at risk from theft or unauthorised access. My company is based in a multi-tenant office with an unattended ...
2
votes
3answers
320 views
Cheap door logging for home?
Does someone here knows a cheap DIY door logging system?
What I have:
- 2 doors that needs to be logged
- 1 netbook (running OpenBSD with internet connection & root permissions), the two doors ...
5
votes
3answers
604 views
What can a hacker do when he has physical access to a system?
I mean, I'm a tech guy here in my region (not a hacker...). When I sit in the front of another person's PC, I notice a little fear about what I can do in the system.
It's obvious that I will not ...
3
votes
1answer
232 views
Does setting a firmware password add security if FileVault 2 is enabled?
On an up-to-date OS X computer with FileVault 2 (whole-disk encryption, minus the recovery partition), is any security gained by setting a firmware password, as well?
12
votes
4answers
800 views
How do you prevent physical backups from being stolen?
I'm sure, by now, we're all aware of the need to encrypt backup disks, but what can be done on the physical security side of things to prevent backups from being stolen or damaged?
Particularly:
...
5
votes
3answers
503 views
How do I improve the physical security of a rack cabinet?
I've got an 8U 19-inch server rack cabinet with two locks - one on the front panel, one on the rear panel. The locks are small cam locks, but the cam part is rather thin and flimsy-looking.
I could ...
10
votes
3answers
2k views
How can I prevent someone from accessing a Windows XP system via boot disk?
Apparently a computer system protected by a a login password, e.g. Windows XP, can be easily hacked by someone with physical access to it using methods like this one:
...
1
vote
3answers
96 views
What would be a good way to guarantee security of theft and loss of sensitive data in a shared rack?
Two of my servers are in a shared rack, we secure them by adding frontcovers to the machines.
The DC is always recording with a camera when one of the shared racks is opened and they write down what ...
3
votes
1answer
168 views
When a company asks to test physical security, what are some techniques one could use to gain entry?
When a company asks to test physical/infrastructure security, what are some techniques one could use to test employees?
This could include good excuses to gain access to some hardware/software.
16
votes
7answers
1k views
Protecting critical state infrastructure from the aftermath of a nuclear blast
Countries rely on computer infrastructure for a huge percentage of communications and military management, as well as utilities like electricity. Unfortunately, nuclear attacks release massive ...
0
votes
1answer
210 views
Standards for physical Access Control systems
Hoping to help protect an IT installation, I've been looking into physical protection systems, specifically Access Control for protected areas. The field is quite big. Are there any US or ...
-2
votes
1answer
72 views
Is SE a bigger threat than breaking-and-entering or other threats? [closed]
Thinking about this week's topic I thought of something I would love to hear more about:
What is so special about Social Engineering? Is SE a bigger threat than breaking-and-entering?
This is not ...
3
votes
1answer
281 views
What camera resolution is required to identify human faces?
I've been asked to recommend an IP-based security camera in attempt to prevent, or at least record, repeated acts of vandalism occurring at the front of a property.
Budget is a concern (The damage ...
0
votes
0answers
131 views
Does anyone have recommendations for PenTest companies? [closed]
As our company is growing in size we've decided its time for a PenTest. We'd like to do several pentests. One on our actual stie hosted off site on a dedicated provider. One of our internal office ...
19
votes
9answers
613 views
What's a good way to trigger a hidden 'distress signal' in instant messaging?
Here's the scenario:
Alice and bob use Off-the-record messaging to communicate over IM. The have:
Encryption
Authentication
Deniability
Perfect forward secrecy
They communicate after ...
3
votes
2answers
107 views
What value security wise, if any, does a digital handwritten signature have?
Here's an example of what I mean:
(It's basically the same thing as a traditional signature.)
Given I've never seen someone fail this control, it's unclear to me what real security such a system ...
1
vote
1answer
198 views
What makes a secure smartcard secure? Is contactless/RFID better?
In short what security features exist that I should look for in a smart card?
What physical features exist, which are important?
It appears smart cards may exhibit different levels of wear and ...
2
votes
3answers
255 views
Is there such thing as a password enforced write protected flash drive?
We would like to provide a flash drive to a client, that they can boot to, which includes a read-only operating system of our own customization, probably Linux. Every boot, it starts from clean slate.
...
2
votes
2answers
370 views
External IP same as Internal IP security
Where I live my ISP does not give IP addresses out. My external IP address is the same as my external if I plug directly into the wall with no router. My ISP does give everybody a "router", that is ...
6
votes
7answers
2k views
Physical computer security, how to disable USB ports when the computer is 'locked'?
Lets say my PC & server is in an environment where a theoretical attacker has physical access to the machine while I'm not there. Now the data is encrypted on the hard drive with TrueCrypt. ...
18
votes
6answers
797 views
How to secure a WiFi network?
What do I have to do to secure a WiFi network? Is there any best practices?
I have been recommended to use WPA2 encryption on the router, is that enough? What can I do to improve the security even ...
5
votes
1answer
338 views
Cutting and sniffing fiberoptic cables - time before detection?
Suppose you'd cut a fiberoptic cable with two razor sharp mirrors, reflecting the traffic out into your sniffing device and then back into the wire again. How fast would you need to get the traffic up ...
2
votes
1answer
756 views
good product to physical lock down a mac mini server?
Since recent theft of a mac mini and macbook pro Im looking into products to lock down the mac mini server 2011 model. There are many cable solutions out there like kensington but the mac mini has no ...
7
votes
3answers
254 views
Securing a LAN without Physical Security
I've got an interesting dilemma. I have a large (50+ users) office that is going to be on the campus of a local university. The purpose is to foster collaboration, etc, but the open environment is ...
3
votes
4answers
243 views
Help to account all the points of physical access to a rack server to steal software
Let's say I want to move my 1U Dell server to co-location site with a hostile company who will try to steal my code (this is almost 90% probability if I dont take steps)...
The limitation for their ...
16
votes
4answers
487 views
Securing an area both physically and technically
I work for a commercial printing company, and we're beginning to get a couple jobs labeled "High Security". Essentially this means that if any pictures/information/files/etc. of the product were ...
13
votes
2answers
858 views
Methods for protecting computer systems from physical attacks
I am interested in cost effective and creative ideas for detecting physical attacks against computer systems. This includes, but is not limited to Tamper Evident security measures.
Consider the ...
7
votes
4answers
297 views
How to test a physical machine?
In two weeks time, I will have to test a couple of computers that a client would like to provide to its employees. The main concern is making sure that the employees won't be able to use those ...
3
votes
3answers
417 views
Physical laptop lock
I brought this really great laptop, but I cannot find something that I can lock the laptop physically to the desk or prevent a thief from grabbing this laptop.
There is no "universal" hole there that ...
6
votes
3answers
148 views
Requiring Authentication to Exit
I've often wondered why facilities do not require authentication as a default on exit. Beyond the oblivious reasons:
Fire safety policies would require a panic mechanism to override the access ...
8
votes
4answers
337 views
Best practices for physically securing a notebook
If the user knows that other people will repeatedly have physical access to her notebook - running Linux - while she is absent, and that there is no way around this, what are best practices for ...
8
votes
3answers
2k views
Using RFID-only on door lock to house?
I'm thinking of equipping the door to my house with an RFID-reader and a custom arduino-like board to do the authentication.
My question is what is the recommended security level for a normal house ...
6
votes
4answers
146 views
How to choose/compromise between data protection, and device recovery?
I'm sure many of you have probably seen (online or in-person) the DEFCON 18 presentation, demonstrating what can happen if you steal a hacker's computer. For those who haven't, the link is below. ...
10
votes
5answers
293 views
Resources for physical security questions
What are good resources for the physical security questions that IT organizations face? Like best practices for locks and seals on servers and kiosks, personnel access mechanisms and policies, ...
5
votes
1answer
508 views
access control to data-center using rfid
I don't know if "here" is the right place to make this kind of question...
so here it is..
Is rfid a good solution for controlling access to a data-center?
Because rfid is "wireless", is it ...
12
votes
2answers
228 views
Establishing routines on what to do if a PC gets stolen
I need to establish routines for how to handle theft of PC equipment, specifically laptops and stationary machines. Also I need to figure out how to make the consequences of stolen equipment minimal.
...
16
votes
7answers
789 views
Securing the security guy's home office: what should we do?
I read an article in the latest InfoSecurity magazine (an infosec trade rag by Elsevier) saying that us security professionals aren't necessarily taking the correct steps to protect our own home ...
