CBK#10 Physical Security - Page 4

CBK#10 Physical Security - Page 1 2 3 4 5

Personnel Access Controls:
Proper identification to verify if the person attempting to access a facility or area should actually be allowed in.
Piggybacking - When an individual gains unauthorized access by using someone else's legitimate credentials or access rights.

Magnetic cards:
Memory card - The reader will pull information form it and make an access decision.
Smart card - The individual may be required to enter a PIN or password, which the reader compares against the information held within the card.

Wireless Proximity Readers:
User activated - Transmits a sequence of values to the reader
System sensing - Will recognize the presence of the coded device within a specific area.
   - Transponders: The card and reader have a receiver, transmitter
      and battery
   - Passive devices: The card does not have any power source of its
      own
   - Field-powered devices: The card and reader contain a
      transmitter and active electronics.

External Boundary Protection Mechanism:
Fencing:
3-4 feet - Deter casual trespassers
6-7 feet - Considered too high to climb easy
8 feet with 3 strands of barbed wire - Deter intruders
  Mantrap - The entrance is routed through a set of double doors that may be monitored by a guard.

Lighting:
Should be used to discourage intruders and provide safety for personnel, entrances, parking areas and critical sections.
Critical areas should be illuminated 8 feet high and 2 feet out.

Surveillance Devices:
Three main categories -
- Patrol Force and Guards - Can make determinations
- Dogs - Are loyal, reliable and have a sense of smell and hearing
- Visual Recording Devices: Camera, CCTV, …

Detecting:
Proximity Detection System / Capacitance detector -
Emits a measurable magnetic field while in use. The detector monitor this electrical field and an alarm sounds if the field is disrupted.
Photoelectric or Photometric System -
Detects the change in the level of light within an area.
Wave Patterns -
Generates a wave pattern that is sent over an area and reflected back to the receiver.
Passive Infrared System -
Identifies the changes of heat waves with an area it is configured to protect.
Acoustical-Seismic Detection System -
Is sensitive to sounds and vibrations and detects the changes in the noise level of an area it is placed.

CBK#10 Physical Security - Page 1 2 3 4 5

CISSP Summary 2002Related links | References

CBK#1 Access Control Systems & Methodology | CBK#2 Telecommunications & Network Security | CBK#3 Security Management Practices | CBK#4 Applications & Systems Development Security | CBK#5 Cryptography | CBK#6 Security Architecture & Models | CBK#7 Operations Security | CBK#8 Business Continuity Planning & Disaster Recovery Planning | CBK#9 Law, Investigations & Ethics | CBK#10 Physical Security

Contact:

E-mail: john.wallhoff@mailbox.swipnet.se
Written by: J.Wallhoff January - April 2002
Updated by: J.Wallhoff April 2002