Physical Security (OBJ 1.2 & 2.4)

Course Overview on Physical Security

Objectives Focused

  • Focus on objectives 1.2 and 2.4 of the course.

Physical Security

  • Definition: Measures taken to protect tangible assets (buildings, equipment, people) from harm or unauthorized access.
    • Example:
    • Companies may install surveillance cameras and employ security guards to monitor their premises.
    • Goal: To ensure unauthorized individuals cannot gain entry or tamper with infrastructure.

Detailed Focus Areas

Objective 1.2: Fundamental Security Concepts
  • Focus on summarizing physical security concepts and tools under this objective.
Objective 2.4: Analyzing Malicious Activities
  • Focus on identifying different attacks aimed at overcoming physical security controls.
  • Specific requirement: Given a scenario, you must analyze indicators of malicious activities.

Security Measures and Countermeasures

Starting Point: External Security Measures
Fencing and Bollards
  • Bollards: Short, sturdy vertical posts designed to control or prevent vehicle access to an area or structure.
  • Fences: Barriers usually made of posts and wire or boards that enclose a space or separate areas.
Brute Force Attacks
  • Types of physical brute force attacks against security:
    • Forcible entry: Breaking or forcing open doors or other barriers.
    • Tampering with security devices: Physical manipulation of alarms, cameras, etc.
    • Confronting security personnel: Directly challenging or intimidating guards or security forces.
    • Ramming a barrier with a vehicle: Using a vehicle as a weapon to break through physical defenses.
Surveillance Systems
  • Definition: Organized strategies to observe and report activities within specific areas.
  • Components: Video surveillance, security guards, lighting, sensors.
  • Topics to explore:
    • Methods used by attackers to bypass or trick surveillance systems and sensors.
Access Control Vestibules
  • Definition: A double-door system designed to allow one door to open at a time electronically.
  • Purpose: To prevent unauthorized access through techniques like:
    • Piggybacking: When an authorized individual allows an unauthorized individual to enter a secure area by holding the door.
    • Tailgating: When an unauthorized person follows closely behind an authorized individual to gain entry without consent.
Types of Door Locks
  • Overview of various door locks for physical security:
    • Padlocks: Locks that can be easily secured without a fixed, integrated structure.
    • Pin and tumbler locks: Common locking mechanism used in many doors.
    • Numeric locks: Keypad-access locks requiring a code.
    • Wireless locks: Locks that operate via wireless technology.
    • Biometric locks: Locks that use fingerprints or other biometric data for access.
    • Cipher locks: Locks requiring a code or sequence known only to authorized users.
    • Electronic access systems: Advanced locking systems using electronic components.

Demonstration of Lock Picking

  • Practical demonstration on picking a pin and tumbler lock using a padlock.
    • Aim: To illustrate how quickly simplified access controls can be defeated by skilled attackers.

Access Badges and Cloning

In-depth Exploration
  • Focus on modern electronic access control systems that utilize RFID or NFC technology.
  • Topics:
    • How access badge cloning can be performed by attackers.
    • Demonstration of cloning using the Flipper Zero, a penetration testing tool.

Conclusion and Quiz

  • End of section: A short quiz covering the material discussed.
  • Review Quiz: Each question will be analyzed to clarify correct answers to solidify understanding of physical security concepts.