Network Defense and Countermeasures by Chuck Easttom Chapter 14: Physical Security and Disaster Recovery © 2014 by Pearson Education, Inc. Chapter 14 Physical Security and Disaster Recovery 2 Objectives  Understand Physical Security  Implement Physical Security  Understand Disaster Recovery  Understand Business Continuity Definition: Physical Security  The physical measures and their associated procedures to safeguard and protect against:  Damage  Loss  Theft © 2014 by Pearson Education, Inc. Chapter 14 Physical Security and Disaster Recovery 3 Required Physical Controls  Perimeter and Building Grounds  Building Entry Points  Inside the Building – Building Floors / Offices  Data Centers or Server Room Security  Computer Equipment Protection © 2014 by Pearson Education, Inc. Chapter 14 Physical Security and Disaster Recovery 4 Examples of Threats  Emergencies  Fire and Smoke Contaminants  Building Collapse or Explosion  Utility Loss (Power, AC, Heat)  Water Damage (Broken Pipes) © 2014 by Pearson Education, Inc. Chapter 14 Physical Security and Disaster Recovery 5 Fire Prevention  Use Fire Resistant Materials for Walls, Doors, Furnishings, etc.  Reduce the Amount of Combustible Papers Around Electrical Equipment  Provide Fire Prevention Training to Employees  REMEMBER: Life Safety is the Most Important Issue!  Conduct Fire Drills on All Shifts So that Personnel Know How to Exit A Building © 2014 by Pearson Education, Inc. Chapter 14 Physical Security and Disaster Recovery 6 Fire Detection  Automatic Dial-Up Fire Alarm  System Dials the Local Fire or Police Department and Plays a Prerecorded Message When a Fire is Detected  Usually Used in Conjunction with One of the Other Type of Fire Detectors  This Type of System Can Be Easily/Intentionally Subverted  Combinations are Usually Used for The Best Effectiveness in Detecting a Fire © 2014 by Pearson Education, Inc. Chapter 14 Physical Security and Disaster Recovery 7 Fire Suppression  Carbon Dioxide (CO2), Foam, Inert Gas and Dry Power Extinguishers DISPLACE Oxygen to Suppress a Fire  CO2 Is a Risk to Humans (Because of Oxygen Displacement)  Water Suppresses the Temperature Required to Sustain a Fire © 2014 by Pearson Education, Inc. Chapter 14 Physical Security and Disaster Recovery 8 Fire Suppression - Halon  Halon Banned for New Systems Under 1987 Montreal Protocol on Substances that Deplete the Ozone Layer  Began Implementation of Ban in 1992  Any New Installations of Fire Suppression systems Must Use Alternate Options  EU Requires Removal of Halon for Most Applications  Halon Replacements:  FM200, © 2014 by Pearson Education, Inc. Chapter 14 Physical Security and Disaster Recovery 9 Safety Fire Extinguishers  Class A – Ordinary combustibles such as w ...

1. Network Defense and
Countermeasures
by Chuck Easttom
Chapter 14: Physical Security and Disaster Recovery
© 2014 by Pearson Education, Inc. Chapter 14 Physical
Security and Disaster
Recovery 2
Objectives
Security
Definition: Physical Security
procedures to safeguard and protect against:

2. ft
© 2014 by Pearson Education, Inc. Chapter 14 Physical
Security and Disaster
Recovery 3
Required Physical Controls
– Building Floors / Offices
rs or Server Room Security
© 2014 by Pearson Education, Inc. Chapter 14 Physical
Security and Disaster
Recovery 4
Examples of Threats

3. losion
© 2014 by Pearson Education, Inc. Chapter 14 Physical
Security and Disaster
Recovery 5
Fire Prevention
Furnishings, etc.
Around Electrical Equipment
Employees
Issue!
Personnel Know How to Exit A Building
© 2014 by Pearson Education, Inc. Chapter 14 Physical
Security and Disaster

4. Recovery 6
Fire Detection
-Up Fire Alarm
Plays a Prerecorded Message When a Fire is
Detected
Type of Fire Detectors
Subverted
Effectiveness in Detecting a Fire
© 2014 by Pearson Education, Inc. Chapter 14 Physical
Security and Disaster
Recovery 7
Fire Suppression

5. Dry Power Extinguishers DISPLACE Oxygen
to Suppress a Fire
Oxygen Displacement)
Required to Sustain a Fire
© 2014 by Pearson Education, Inc. Chapter 14 Physical
Security and Disaster
Recovery 8
Fire Suppression - Halon
Montreal Protocol on Substances that Deplete
the Ozone Layer
Must Use Alternate Options

6. s:
© 2014 by Pearson Education, Inc. Chapter 14 Physical
Security and Disaster
Recovery 9
Safety Fire Extinguishers
– Ordinary combustibles such as
wood or paper.
– Flammable liquids such as grease,
oil, or gasoline.
– Electrical Equipment
– Flammable Metals
© 2014 by Pearson Education, Inc. Chapter 14 Physical
Security and Disaster
Recovery 10
Fire Suppression - Water

7. ar and Reliable
© 2014 by Pearson Education, Inc. Chapter 14 Physical
Security and Disaster
Recovery 11
Fire Suppression – Water

8. om
Melts in Nozzle the Water is Dispersed
© 2014 by Pearson Education, Inc. Chapter 14 Physical
Security and Disaster
Recovery 12
What Is a Disaster
y natural or man-made event that disrupts
the operations of a business
in such a significant way that a considerable
and coordinated effort is required to achieve
a recovery.
© 2014 by Pearson Education, Inc. Chapter 14 Physical
Security and Disaster
Recovery 13
How BCP and DRP
Support Security

9. DRP (Disaster Recovery Planning)
-I-A
lity
© 2014 by Pearson Education, Inc. Chapter 14 Physical
Security and Disaster
Recovery 14
BCP and DRP Differences
and Similarities
critical business processes in an organization
-IT aspects of business

10. restoration of damaged facilities and systems
© 2014 by Pearson Education, Inc. Chapter 14 Physical
Security and Disaster
Recovery 15
The Role of Prevention
ng
operation of critical business processes
© 2014 by Pearson Education, Inc. Chapter 14 Physical
Security and Disaster
Recovery 16

11. Running a BCP / DRP Project
-project activities
plans
© 2014 by Pearson Education, Inc. Chapter 14 Physical
Security and Disaster
Recovery 17
Performing a Business
Impact Analysis
cost, maintenance cost.
orm risk analyses and threat assessment

12. (MTD)
© 2014 by Pearson Education, Inc. Chapter 14 Physical
Security and Disaster
Recovery 18
RAID
distributes data across multiple disks
in a way that gives improved speed at
any given instant. NO fault tolerance
1:1 ratio realtime backup. Also called
mirroring
isks with dedicated parity) combines
three or more disks in a way that protects
data against loss of any one disk. Fault tolerance is achieved by
adding an extra disk to the array and
dedicating it to storing parity information. The storage capacity
of the array is reduced by one disk
or more disks in a way that protects data

13. against the loss of any one disk. It is similar to RAID 3 but the
parity is not stored on one dedicated
drive, instead parity information is interspersed across the drive
array. The storage capacity of the
array is a function of the number of drives minus the space
needed to store parity
more disks in a way that protects data against
loss of any two disks.
then striped (RAID 0), hence the "1+0"
name. A RAID 1+0 array requires a minimum of four drives:
two mirrored drives to hold half of the
striped data, plus another two mirrored for the other half of the
data.
© 2014 by Pearson Education, Inc. Chapter 14 Physical
Security and Disaster
Recovery 19
Backups
- all changes
– all changes since last full backup

14. – all changes since last backup of
any type
© 2014 by Pearson Education, Inc. Chapter 14 Physical
Security and Disaster
Recovery 20
Summary
fences, and physical access control.
part of physical security.
before disaster recovery.
© 2014 by Pearson Education, Inc. Chapter 14 Physical
Security and Disaster
Recovery 21
Summary cont.

15. restoring full normal operations.
maintain some level of operations until full
recovery can be achieved.
tolerance and disaster recovery.
© 2014 by Pearson Education, Inc. Chapter 14 Physical
Security and Disaster
Recovery 22
2
Contents
1. Cover Page
2. Title Page
3. Copyright Page
4. Contents at a Glance
5. Contents
6. About This E-Book
7. Preface
8. About the Author

16. 9. Dedication
10. Acknowledgments
11. About the Technical Reviewers
12. We Want to Hear from You!
13. Reader Services
14. Chapter 1: Introduction to Network Security
1. Introduction
2. The Basics of a Network
1. Basic Network Structure
2. Data Packets
3. IP Addresses
4. Uniform Resource Locators
5. MAC Addresses
6. Protocols
3. Basic Network Utilities
3
1. ipconfig
2. ping
3. tracert
4. netstat
4. The OSI Model
5. What Does This Mean for Security?
6. Assessing Likely Threats to the Network
7. Classifications of Threats
1. Malware
2. Compromising System Security—Intrusions

17. 3. Denial of Service
8. Likely Attacks
9. Threat Assessment
10. Understanding Security Terminology
1. Hacking Terminology
2. Security Terminology
11. Choosing a Network Security Approach
1. Perimeter Security Approach
2. Layered Security Approach
3. Hybrid Security Approach
12. Network Security and the Law
13. Using Security Resources
14. Summary
15. Chapter 2: Types of Attacks
4
1. Introduction
2. Understanding Denial of Service Attacks
1. DoS in Action
2. SYN Flood
3. Smurf Attack
4. Ping of Death
5. UDP Flood
6. ICMP Flood
7. DHCP Starvation

18. 8. HTTP Post DoS
9. PDoS
10. Distributed Reflection Denial of Service
11. DoS Tools
12. Real-World Examples
13. Defending Against DoS Attacks
3. Defending Against Buffer Overflow Attacks
4. Defending Against IP Spoofing
5. Defending Against Session Hijacking
6. Blocking Virus and Trojan Horse Attacks
1. Viruses
2. Types of Viruses
3. Trojan Horses
7. Summary
16. Chapter 3: Fundamentals of Firewalls
1. Introduction
2. What Is a Firewall?
5
1. Types of Firewalls
2. Packet Filtering Firewall
3. Stateful Packet Inspection
4. Application Gateway
5. Circuit Level Gateway
6. Hybrid Firewalls
7. Blacklisting/Whitelisting

19. 3. Implementing Firewalls
1. Host-Based
2. Dual-Homed Hosts
3. Router-Based Firewall
4. Screened Hosts
4. Selecting and Using a Firewall
1. Using a Firewall
5. Using Proxy Servers
1. The WinGate Proxy Server
2. NAT
6. Summary
17. Chapter 4: Firewall Practical Applications
1. Introduction
2. Using Single Machine Firewalls
3. Windows 10 Firewall
4. User Account Control
6
5. Linux Firewalls
1. Iptables
2. Symantec Norton Firewall
3. McAfee Personal Firewall
6. Using Small Office/Home Office Firewalls

20. 1. SonicWALL
2. D-Link DFL-2560 Office Firewall
7. Using Medium-Sized Network Firewalls
1. Check Point Firewall
2. Cisco Next-Generation Firewalls
8. Using Enterprise Firewalls
9. Summary
18. Chapter 5: Intrusion-Detection Systems
1. Introduction
2. Understanding IDS Concepts
1. Preemptive Blocking
2. Anomaly Detection
3. IDS Components and Processes
4. Understanding and Implementing IDSs
1. Snort
2. Cisco Intrusion-Detection and Prevention
7
5. Understanding and Implementing Honeypots
1. Specter
2. Symantec Decoy Server
3. Intrusion Deflection
4. Intrusion Deterrence

21. 6. Summary
19. Chapter 6: Encryption Fundamentals
1. Introduction
2. The History of Encryption
1. The Caesar Cipher
2. ROT 13
3. Atbash Cipher
4. Multi-Alphabet Substitution
5. Rail Fence
6. Vigenère
7. Enigma
8. Binary Operations
3. Learning About Modern Encryption Methods
1. Symmetric Encryption
2. Key Stretching
3. PRNG
4. Public Key Encryption
5. Digital Signatures
4. Identifying Good Encryption
5. Understanding Digital Signatures and Certificates
8
1. Digital Certificates
2. PGP Certificates
3. MD5
4. SHA

22. 5. RIPEMD
6. HAVAL
6. Understanding and Using Decryption
7. Cracking Passwords
1. John the Ripper
2. Using Rainbow Tables
3. Using Other Password Crackers
4. General Cryptanalysis
8. Steganography
9. Steganalysis
10. Quantum Computing and Quantum Cryptography
11. Summary
20. Chapter 7: Virtual Private Networks
1. Introduction
2. Basic VPN Technology
3. Using VPN Protocols for VPN Encryption
1. PPTP
2. PPTP Authentication
3. L2TP
4. L2TP Authentication
5. L2TP Compared to PPTP
4. IPSec
9

23. 5. SSL/TLS
6. Implementing VPN
Solution
s
1. Cisco