Physical and Infrastructure Security

Summary

The lecture explores physical and infrastructure security, focusing on protecting data and systems from both human and environmental threats. Key topics include safeguarding facilities, hardware, and personnel, preventing unauthorized access, and mitigating risks from natural disasters, technical failures, chemical, biological, and radiological hazards, as well as dust, pests, and power issues. It emphasizes integrated security solutions combining physical and logical measures, such as surveillance, access control, UPS, and cloud computing. Standards like FIPS 201-2 guide identity verification and authentication, enabling multi-factor access control and centralized management. The session highlights proactive prevention, monitoring, and disaster recovery to ensure information integrity and operational continuity.

Takeaways

• 🔐 Physical security protects systems, data, and personnel from unauthorized access or physical threats, complementing logical security.
• 🌪 Environmental threats include natural disasters like earthquakes, floods, storms, tornadoes, and extreme weather conditions that can damage infrastructure.
• 💻 Technical threats involve hardware failures, power outages, electromagnetic interference (EMI), and other disruptions that affect system performance.
• 👥 Human-related threats include theft, sabotage, unauthorized access, tampering, and espionage by insiders or outsiders.
• ☣️ Chemical, radiological, and biological threats pose risks through spills, contamination, bioterrorism, and radiation exposure, requiring preventive measures and emergency plans.
• 🧹 Dust, humidity, mold, and pests can harm electronic devices, storage media, and building structures, emphasizing the need for proper maintenance and environmental controls.
• 🛡 Mitigation strategies include access control, CCTV, motion sensors, fire and water management, UPS, generators, environmental monitoring, and regular inspections.
• ☁️ Logical security benefits from cloud computing, encrypted remote backups, and centralized identity management for integrated protection of physical and digital assets.
• 🆔 FIPS 201-2 compliant PIV cards enable multi-factor authentication for both physical and logical access, integrating biometrics, PINs, and digital certificates.
• 🏢 SP 800-116 framework defines tiered access levels: open areas, controlled areas, restricted areas, and exception areas, each requiring increasing levels of authentication.
• 🔗 Integrating physical and logical security into a single management system improves efficiency, auditability, response time, and reduces risks of unauthorized access.
• 📦 Disaster recovery and data redundancy strategies, including offsite and remote encrypted backups, ensure business continuity in case of physical or logical security breaches.

Q & A

What is the primary goal of physical and infrastructure security?

The primary goal is to protect systems and information from software-based attacks and communication threats, as well as to safeguard physical assets, personnel, and infrastructure that support data storage and processing.

What are the two complementary requirements of physical security?

First, preventing damage to physical infrastructure, including hardware, facilities, and supporting systems; second, preventing misuse of physical infrastructure that could lead to data misuse or damage, including actions like vandalism, theft, or unauthorized access.

What are the main environmental threats to physical security?

Environmental threats include natural disasters such as earthquakes, floods, storms, tornadoes, tropical cyclones, blizzards, hail, lightning, and changes in temperature or humidity, which can damage hardware and infrastructure.

How can chemical, radiological, and biological threats be managed?

These threats can be managed by implementing detection systems, providing personnel training on preventive and responsive measures, monitoring the environment for spills or releases, and establishing emergency plans including evacuation and protective actions.

What technical measures help mitigate threats to hardware from power or electromagnetic interference?

Measures include using surge protectors, uninterruptible power supplies (UPS), separating power lines to reduce interference, and shielding equipment from electromagnetic noise (EMI).

What are some preventive measures against human-caused physical threats?

Preventive measures include strict access controls to restricted areas, electronic security systems like cameras and motion sensors, personnel training on security awareness, regular audits, and monitoring of user activity and resources.

How does cloud computing enhance physical security?

Cloud computing provides an additional security layer by storing data in advanced data centers with strict security measures, regular backups, and environmental controls, ensuring continuity and protection of critical information.

What is the role of FIPS 201-compliant PIV systems in integrating physical and logical security?

FIPS 201-compliant PIV systems integrate physical and logical security by using smart cards with contact and contactless features, supporting multi-factor authentication, and enabling a single identity for both physical access and logical systems.

What are the benefits of unifying physical and logical access through a single identity system?

Benefits include simplified authentication for employees, reduced risk of lost tokens, streamlined identity management, central monitoring for audits, and consistent security enforcement across both physical and digital domains.

How are different authentication factors applied to varying access levels in SP 800-116 guidelines?

One-factor authentication is used for general controlled areas, two-factor authentication for restricted areas, and three-factor authentication for high-risk or sensitive areas, ensuring security proportional to access risk.

What are some steps to ensure data recovery in case of physical security breaches?

Steps include maintaining redundant systems, offsite data storage, encrypted remote backups, disaster recovery sites, and routine testing and updating of recovery procedures to ensure data and operational continuity.

How can dust, pests, and environmental factors affect physical security, and what measures can mitigate these risks?

Dust can cause overheating and damage storage media, pests like mold, insects, or rodents can damage documents and hardware, and high humidity can trigger mold growth. Mitigation includes regular cleaning, monitoring humidity, using pest control, and ensuring proper ventilation.