The protection of personnel, hardware, programs, networks, and data from physical circumstances and events.

learn more… | top users | synonyms (1)

3
votes
1answer
546 views

Does setting a firmware password add security if FileVault 2 is enabled?

On an up-to-date OS X computer with FileVault 2 (whole-disk encryption, minus the recovery partition), is any security gained by setting a firmware password, as well?
15
votes
4answers
1k views

How do you prevent physical backups from being stolen?

I'm sure, by now, we're all aware of the need to encrypt backup disks, but what can be done on the physical security side of things to prevent backups from being stolen or damaged? Particularly: ...
5
votes
3answers
1k views

How do I improve the physical security of a rack cabinet?

I've got an 8U 19-inch server rack cabinet with two locks - one on the front panel, one on the rear panel. The locks are small cam locks, but the cam part is rather thin and flimsy-looking. I could ...
11
votes
3answers
3k views

How can I prevent someone from accessing a Windows XP system via boot disk?

Apparently a computer system protected by a a login password, e.g. Windows XP, can be easily hacked by someone with physical access to it using methods like this one: ...
1
vote
3answers
137 views

What would be a good way to guarantee security of theft and loss of sensitive data in a shared rack?

Two of my servers are in a shared rack, we secure them by adding frontcovers to the machines. The DC is always recording with a camera when one of the shared racks is opened and they write down what ...
3
votes
1answer
487 views

When a company asks to test physical security, what are some techniques one could use to gain entry?

When a company asks to test physical/infrastructure security, what are some techniques one could use to test employees? This could include good excuses to gain access to some hardware/software.
23
votes
7answers
2k views

Protecting critical state infrastructure from the aftermath of a nuclear blast

Countries rely on computer infrastructure for a huge percentage of communications and military management, as well as utilities like electricity. Unfortunately, nuclear attacks release massive ...
0
votes
1answer
506 views

Standards for physical Access Control systems

Hoping to help protect an IT installation, I've been looking into physical protection systems, specifically Access Control for protected areas. The field is quite big. Are there any US or ...
3
votes
1answer
2k views

What camera resolution is required to identify human faces?

I've been asked to recommend an IP-based security camera in attempt to prevent, or at least record, repeated acts of vandalism occurring at the front of a property. Budget is a concern (The damage ...
19
votes
9answers
906 views

What's a good way to trigger a hidden 'distress signal' in instant messaging?

Here's the scenario: Alice and bob use Off-the-record messaging to communicate over IM. The have: Encryption Authentication Deniability Perfect forward secrecy They communicate after ...
3
votes
2answers
216 views

What value security wise, if any, does a digital handwritten signature have?

Here's an example of what I mean: (It's basically the same thing as a traditional signature.) Given I've never seen someone fail this control, it's unclear to me what real security such a system ...
1
vote
1answer
377 views

What makes a secure smartcard secure? Is contactless/RFID better?

In short what security features exist that I should look for in a smart card? What physical features exist, which are important? It appears smart cards may exhibit different levels of wear and ...
2
votes
3answers
592 views

Is there such thing as a password enforced write protected flash drive?

We would like to provide a flash drive to a client, that they can boot to, which includes a read-only operating system of our own customization, probably Linux. Every boot, it starts from clean slate. ...
2
votes
2answers
721 views

External IP same as Internal IP security

Where I live my ISP does not give IP addresses out. My external IP address is the same as my external if I plug directly into the wall with no router. My ISP does give everybody a "router", that is ...
6
votes
1answer
850 views

Cutting and sniffing fiberoptic cables - time before detection?

Suppose you'd cut a fiberoptic cable with two razor sharp mirrors, reflecting the traffic out into your sniffing device and then back into the wire again. How fast would you need to get the traffic up ...
8
votes
3answers
394 views

Securing a LAN without Physical Security

I've got an interesting dilemma. I have a large (50+ users) office that is going to be on the campus of a local university. The purpose is to foster collaboration, etc, but the open environment is ...
3
votes
4answers
338 views

Help to account all the points of physical access to a rack server to steal software

Let's say I want to move my 1U Dell server to co-location site with a hostile company who will try to steal my code (this is almost 90% probability if I dont take steps)... The limitation for their ...
19
votes
4answers
938 views

Securing an area both physically and technically

I work for a commercial printing company, and we're beginning to get a couple jobs labeled "High Security". Essentially this means that if any pictures/information/files/etc. of the product were ...
8
votes
4answers
338 views

How to test a physical machine?

In two weeks time, I will have to test a couple of computers that a client would like to provide to its employees. The main concern is making sure that the employees won't be able to use those ...
3
votes
3answers
651 views

Physical laptop lock

I brought this really great laptop, but I cannot find something that I can lock the laptop physically to the desk or prevent a thief from grabbing this laptop. There is no "universal" hole there that ...
6
votes
3answers
165 views

Requiring Authentication to Exit

I've often wondered why facilities do not require authentication as a default on exit. Beyond the oblivious reasons: Fire safety policies would require a panic mechanism to override the access ...
8
votes
4answers
436 views

Best practices for physically securing a notebook

If the user knows that other people will repeatedly have physical access to her notebook - running Linux - while she is absent, and that there is no way around this, what are best practices for ...
10
votes
3answers
5k views

Using RFID-only on door lock to house?

I'm thinking of equipping the door to my house with an RFID-reader and a custom arduino-like board to do the authentication. My question is what is the recommended security level for a normal house ...
6
votes
4answers
173 views

How to choose/compromise between data protection, and device recovery?

I'm sure many of you have probably seen (online or in-person) the DEFCON 18 presentation, demonstrating what can happen if you steal a hacker's computer. For those who haven't, the link is below. ...
10
votes
5answers
397 views

Resources for physical security questions

What are good resources for the physical security questions that IT organizations face? Like best practices for locks and seals on servers and kiosks, personnel access mechanisms and policies, ...
5
votes
1answer
663 views

access control to data-center using rfid

I don't know if "here" is the right place to make this kind of question... so here it is.. Is rfid a good solution for controlling access to a data-center? Because rfid is "wireless", is it ...
12
votes
2answers
259 views

Establishing routines on what to do if a PC gets stolen

I need to establish routines for how to handle theft of PC equipment, specifically laptops and stationary machines. Also I need to figure out how to make the consequences of stolen equipment minimal. ...