Your SlideShare is downloading. ×
Your Data Center's Security Guards
Upcoming SlideShare
Loading in...5
×

Thanks for flagging this SlideShare!

Oops! An error has occurred.

×

Introducing the official SlideShare app

Stunning, full-screen experience for iPhone and Android

Text the download link to your phone

Standard text messaging rates apply

Your Data Center's Security Guards

582
views

Published on

Address to Austin computer security group, DefCon 512, on June 6, 2013 to explain physical security. Talk included examples of failure points and failure modes as well as standards for good security …

Address to Austin computer security group, DefCon 512, on June 6, 2013 to explain physical security. Talk included examples of failure points and failure modes as well as standards for good security as constant improvement.

Published in: Business, Technology

0 Comments
1 Like
Statistics
Notes
  • Be the first to comment

No Downloads
Views
Total Views
582
On Slideshare
0
From Embeds
0
Number of Embeds
0
Actions
Shares
0
Downloads
0
Comments
0
Likes
1
Embeds 0
No embeds

Report content
Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

Cancel
No notes for slide

Transcript

  • 1. Physical Security for Data CentersBy Michael E. Marotta, BS MAWebsite at CSI: Flint (2011) here.BS in Criminology Administration, Summa cum Laude, Eastern MichiganUniversity, 2008.MA in Social Science, Eastern Michigan University, 2010.
  • 2. Our society holds security guards in low esteem
  • 3. Our society holds security guards in low esteem
  • 4. As computer professionals, we know that nerds are funny.
  • 5. But tech mythology has its upsideof seriousness, depth, and drama
  • 6. Nothing like this in common culture exists for private security.
  • 7. But was not always so. Before SWAT teams and “law and order”politics of the Nixon Era, private security was the default mode.
  • 8. America foughta two-front warinvolvingrockets andatomic bombs,and still, RoyRogers playedan insuranceinvestigator, nota sheriff ormarshall.
  • 9. Some of the 36 Security Guards Who Diedin the 911 Attacks on the Twin TowersPatrick Adams – 60, Security officer, Fuji BankAndrew J. Bailey – 29, Security supervisor, Marsh & McLennanLawrence F. Boisseau – 36,, Fire safety director, OCS SecurityFrancisco Bourdier – 40, Security guard, Deutsche BankDenease Conley - 43, Summit SecurityPhilip Thomas Hayes - 67, Fire safety director, OCS SecurityRonald Hoerner – 58, Security manager, Summit Security ServicesMohammed Jawara - MAS SecurityBarry Kirschbaum – 53, Security manager, Marsh & McLennanAnthony Luparello Jr., 63, Security guard, American Building MaintenanceSara Manley - 31, Senior security analyst, Fred Alger ManagementJohn P. ONeill – 50, Security, Silverstein PartnersAlexander Ortiz - Security guard, Grubb & Ellis IncRick Rescorla - 62, head of security for Morgan Stanley Dean Witter
  • 10. "The nine most terrifying wordsin the English language are:Im from the government andIm here to help.”– Ronald Reagan
  • 11. Last fall, Mayor Bloombergfamously bragged, ”I havemy own army in the NYPD,which is the seventhbiggest army in the world.”
  • 12. The US Supreme Court has ruled –“…it is not the duty of the policeto protectthe individual citizen…”Warren v. District of Columbia,444 A.2d 1 (D.C. App. 1981).
  • 13. WHAT PRIVATE SECURITY DOES• It is an axiom of economics thatbusinesses anticipate the future, whilegovernments exist to remediate the past.• Private security prevents problems.• We look forward.• We anticipate problems.• We look for profitable outcomes.
  • 14. Site Assessment
  • 15. Every site is unique. Every site is multi-use.
  • 16. Guards on Patrol Inspect Infrastructure
  • 17. Access Control•Curbs•Berms•Hedges•Gates•Doors•Lights•Locks•Motion Detectors•Alarms•Cameras•Badge Readers
  • 18. From the movie, Sneakers.Two penetration red hats attack the front desk.
  • 19. Carl’s argument heats up to keep the guard distracted.
  • 20. With cake and balloons, the academic-looking guy insists on entry.
  • 21. Now to steal the decryption chip. Lose the balloons. Briefcase is in the box.
  • 22. “Those things are nearly impossible!”
  • 23. There might be a way….
  • 24. Needing to install tile under the door,the workman slipped his screwdriver into the lock to open the door
  • 25. Clear Zones
  • 26. Keep a Clear ZoneToo often, facilities workers can ignore security demands becausesecurity very often reports to facilities management.
  • 27. To be effective, security needsIndependence and AutonomyContract security remains distinct fromother employees.Recognition of professional statusStatus and title appropriate to business,rather than to the military.C-level representation(a CSO to work with the CIO and CFO)
  • 28. The American Society for Industrial Securityis rebranded“ASIS International”
  • 29. Certified Protection Professional (CPP)®- demonstratedknowledge and experience in all areas of securitymanagementProfessional Certified Investigator (PCI)®- demonstratededucation and/or experience in the fields of casemanagement, evidence collection, and case presentationPhysical Security Professional (PSP)®- demonstratedexperience in physical security assessment, theapplication, design and integration of physical securitysystems, and implementation of physical securitymeasures
  • 30. Protect her from herself?
  • 31. Or her?
  • 32. From them?
  • 33. Disaster
  • 34. Enemies are Everywhere
  • 35. They have powerful friends
  • 36. The best defense
  • 37. Is only defense
  • 38. Usually, defense loses to offense
  • 39. PROACTIVE DEFENSE WINS
  • 40. ConciergeLike Tony Stark, Barry Allen, andBarbara Gordon, someone else isunder the suit coat.
  • 41. The Uniform as Symbol… a uniform is what you put on when you are deadly seriousand role-filling. A real uniform brings honor to the personwearing it, and it marks that person as someone who performsimportant impersonal and demanding tasks for the powerful …There is a quasi-religious aspect to uniforms, suggesting thatthe wearer is one who commonly engages in self-sacrifice andrisk-taking. … With so-called "suits," the number of buttons onthe sleeve and whether the shirt is buttoned-down … hastraditionally represented either seniority on the job or a sense ofsuperiority to everyone else ...THE POLICE UNIFORMby Prof.. Mark Stevens (USMC-Ret.)http://faculty.ncwc.edu/mstevens/default.htm
  • 42. Anywhere
  • 43. Whatever the cause
  • 44. Whatever the cost
  • 45. Someone is there
  • 46. To protect you
  • 47. The End