Physical Security for Data CentersBy Michael E. Marotta, BS MAWebsite at CSI: Flint (2011) here.BS in Criminology Administ...
Our society holds security guards in low esteem
Our society holds security guards in low esteem
As computer professionals, we know that nerds are funny.
But tech mythology has its upsideof seriousness, depth, and drama
Nothing like this in common culture exists for private security.
But was not always so. Before SWAT teams and “law and order”politics of the Nixon Era, private security was the default mo...
America foughta two-front warinvolvingrockets andatomic bombs,and still, RoyRogers playedan insuranceinvestigator, nota sh...
Some of the 36 Security Guards Who Diedin the 911 Attacks on the Twin TowersPatrick Adams – 60, Security officer, Fuji Ban...
"The nine most terrifying wordsin the English language are:Im from the government andIm here to help.”– Ronald Reagan
Last fall, Mayor Bloombergfamously bragged, ”I havemy own army in the NYPD,which is the seventhbiggest army in the world.”
The US Supreme Court has ruled –“…it is not the duty of the policeto protectthe individual citizen…”Warren v. District of ...
WHAT PRIVATE SECURITY DOES• It is an axiom of economics thatbusinesses anticipate the future, whilegovernments exist to re...
Site Assessment
Every site is unique. Every site is multi-use.
Guards on Patrol Inspect Infrastructure
Access Control•Curbs•Berms•Hedges•Gates•Doors•Lights•Locks•Motion Detectors•Alarms•Cameras•Badge Readers
From the movie, Sneakers.Two penetration red hats attack the front desk.
Carl’s argument heats up to keep the guard distracted.
With cake and balloons, the academic-looking guy insists on entry.
Now to steal the decryption chip. Lose the balloons. Briefcase is in the box.
“Those things are nearly impossible!”
There might be a way….
Needing to install tile under the door,the workman slipped his screwdriver into the lock to open the door
Clear Zones
Keep a Clear ZoneToo often, facilities workers can ignore security demands becausesecurity very often reports to facilitie...
To be effective, security needsIndependence and AutonomyContract security remains distinct fromother employees.Recogniti...
The American Society for Industrial Securityis rebranded“ASIS International”
Certified Protection Professional (CPP)®- demonstratedknowledge and experience in all areas of securitymanagementProfessio...
Protect her from herself?
Or her?
From them?
Disaster
Enemies are Everywhere
They have powerful friends
The best defense
Is only defense
Usually, defense loses to offense
PROACTIVE DEFENSE WINS
ConciergeLike Tony Stark, Barry Allen, andBarbara Gordon, someone else isunder the suit coat.
The Uniform as Symbol… a uniform is what you put on when you are deadly seriousand role-filling. A real uniform brings hon...
Anywhere
Whatever the cause
Whatever the cost
Someone is there
To protect you
The End
Your Data Center's Security Guards
Your Data Center's Security Guards
Your Data Center's Security Guards
Your Data Center's Security Guards
Your Data Center's Security Guards
Upcoming SlideShare
Loading in …5
×

Your Data Center's Security Guards

1,209 views

Published on

Address to Austin computer security group, DefCon 512, on June 6, 2013 to explain physical security. Talk included examples of failure points and failure modes as well as standards for good security as constant improvement.

Published in: Business, Technology
0 Comments
1 Like
Statistics
Notes
  • Be the first to comment

No Downloads
Views
Total views
1,209
On SlideShare
0
From Embeds
0
Number of Embeds
2
Actions
Shares
0
Downloads
0
Comments
0
Likes
1
Embeds 0
No embeds

No notes for slide

Your Data Center's Security Guards

  1. 1. Physical Security for Data CentersBy Michael E. Marotta, BS MAWebsite at CSI: Flint (2011) here.BS in Criminology Administration, Summa cum Laude, Eastern MichiganUniversity, 2008.MA in Social Science, Eastern Michigan University, 2010.
  2. 2. Our society holds security guards in low esteem
  3. 3. Our society holds security guards in low esteem
  4. 4. As computer professionals, we know that nerds are funny.
  5. 5. But tech mythology has its upsideof seriousness, depth, and drama
  6. 6. Nothing like this in common culture exists for private security.
  7. 7. But was not always so. Before SWAT teams and “law and order”politics of the Nixon Era, private security was the default mode.
  8. 8. America foughta two-front warinvolvingrockets andatomic bombs,and still, RoyRogers playedan insuranceinvestigator, nota sheriff ormarshall.
  9. 9. Some of the 36 Security Guards Who Diedin the 911 Attacks on the Twin TowersPatrick Adams – 60, Security officer, Fuji BankAndrew J. Bailey – 29, Security supervisor, Marsh & McLennanLawrence F. Boisseau – 36,, Fire safety director, OCS SecurityFrancisco Bourdier – 40, Security guard, Deutsche BankDenease Conley - 43, Summit SecurityPhilip Thomas Hayes - 67, Fire safety director, OCS SecurityRonald Hoerner – 58, Security manager, Summit Security ServicesMohammed Jawara - MAS SecurityBarry Kirschbaum – 53, Security manager, Marsh & McLennanAnthony Luparello Jr., 63, Security guard, American Building MaintenanceSara Manley - 31, Senior security analyst, Fred Alger ManagementJohn P. ONeill – 50, Security, Silverstein PartnersAlexander Ortiz - Security guard, Grubb & Ellis IncRick Rescorla - 62, head of security for Morgan Stanley Dean Witter
  10. 10. "The nine most terrifying wordsin the English language are:Im from the government andIm here to help.”– Ronald Reagan
  11. 11. Last fall, Mayor Bloombergfamously bragged, ”I havemy own army in the NYPD,which is the seventhbiggest army in the world.”
  12. 12. The US Supreme Court has ruled –“…it is not the duty of the policeto protectthe individual citizen…”Warren v. District of Columbia,444 A.2d 1 (D.C. App. 1981).
  13. 13. WHAT PRIVATE SECURITY DOES• It is an axiom of economics thatbusinesses anticipate the future, whilegovernments exist to remediate the past.• Private security prevents problems.• We look forward.• We anticipate problems.• We look for profitable outcomes.
  14. 14. Site Assessment
  15. 15. Every site is unique. Every site is multi-use.
  16. 16. Guards on Patrol Inspect Infrastructure
  17. 17. Access Control•Curbs•Berms•Hedges•Gates•Doors•Lights•Locks•Motion Detectors•Alarms•Cameras•Badge Readers
  18. 18. From the movie, Sneakers.Two penetration red hats attack the front desk.
  19. 19. Carl’s argument heats up to keep the guard distracted.
  20. 20. With cake and balloons, the academic-looking guy insists on entry.
  21. 21. Now to steal the decryption chip. Lose the balloons. Briefcase is in the box.
  22. 22. “Those things are nearly impossible!”
  23. 23. There might be a way….
  24. 24. Needing to install tile under the door,the workman slipped his screwdriver into the lock to open the door
  25. 25. Clear Zones
  26. 26. Keep a Clear ZoneToo often, facilities workers can ignore security demands becausesecurity very often reports to facilities management.
  27. 27. To be effective, security needsIndependence and AutonomyContract security remains distinct fromother employees.Recognition of professional statusStatus and title appropriate to business,rather than to the military.C-level representation(a CSO to work with the CIO and CFO)
  28. 28. The American Society for Industrial Securityis rebranded“ASIS International”
  29. 29. Certified Protection Professional (CPP)®- demonstratedknowledge and experience in all areas of securitymanagementProfessional Certified Investigator (PCI)®- demonstratededucation and/or experience in the fields of casemanagement, evidence collection, and case presentationPhysical Security Professional (PSP)®- demonstratedexperience in physical security assessment, theapplication, design and integration of physical securitysystems, and implementation of physical securitymeasures
  30. 30. Protect her from herself?
  31. 31. Or her?
  32. 32. From them?
  33. 33. Disaster
  34. 34. Enemies are Everywhere
  35. 35. They have powerful friends
  36. 36. The best defense
  37. 37. Is only defense
  38. 38. Usually, defense loses to offense
  39. 39. PROACTIVE DEFENSE WINS
  40. 40. ConciergeLike Tony Stark, Barry Allen, andBarbara Gordon, someone else isunder the suit coat.
  41. 41. The Uniform as Symbol… a uniform is what you put on when you are deadly seriousand role-filling. A real uniform brings honor to the personwearing it, and it marks that person as someone who performsimportant impersonal and demanding tasks for the powerful …There is a quasi-religious aspect to uniforms, suggesting thatthe wearer is one who commonly engages in self-sacrifice andrisk-taking. … With so-called "suits," the number of buttons onthe sleeve and whether the shirt is buttoned-down … hastraditionally represented either seniority on the job or a sense ofsuperiority to everyone else ...THE POLICE UNIFORMby Prof.. Mark Stevens (USMC-Ret.)http://faculty.ncwc.edu/mstevens/default.htm
  42. 42. Anywhere
  43. 43. Whatever the cause
  44. 44. Whatever the cost
  45. 45. Someone is there
  46. 46. To protect you
  47. 47. The End

×