1. Dr. Bhavani Thuraisingham The University of Texas at Dallas (UTD) June 2011 Physical (Environmental) Security

2. Domain Agenda Site and Facility Design Criteria Perimeter Security Building and Inside Security Secure Operational Area

3. Site Location Considerations Emergency services Hazards/ threats Adjacency

4. Threats to Physical Security National / environmental Utility systems Human-made/ political events

5. Threat Sources and Controls Threat Theft Espionage Dumpster diving Social engineering Shoulder surfing HVAC access Controls Locks Background checks Disposal procedures Awareness Screen filters Motion sensors in ventilation ducts

6. Domain Agenda Site and Facility Design Criteria Perimeter Security Building and Inside Security Secure Operational Area

7. Perimeter and Building Boundary Protections First line of defense Protective barriers – Natural – Structural

8. Fences Federal, state or local codes may apply Parking should not be allowed near fences

9. Controlled Access Points Gates are the minimum necessary layer Bollards

10. Perimeter Intrusion Detection Systems Detect unauthorized access into an area – Electronic ‘eyes’ Note that some perimeters IDSs can function inside the perimeter as well.

11. Types of Lighting Continuous lighting Trip lighting Standby lighting Emergency exit lighting Emergency egress lighting

12. Access and Visitor Logs and More Rigorous forms of Logging ABC Company Entrance:___________________Date:________________ NameInstitutionName of Person Visiting Time InTime Out

13. Closed Circuit Television (CCTV) CCTV Capability Requirements – Detection – Recognition – Identification Mixing Capabilities Virtual CCTV Systems

14. Guards and Guard Stations Guards – Deterrent – Possible liability Guard stations

15. Domain Agenda Site and Facility Design Criteria Perimeter Security Building and Inside Security Secure Operational Area

16. Doors Isolation of critical areas Lighting of doorways Contact devices Guidelines

17. Building Entry Point Protection Locks Lock components – Body – Strike – Strike plates – Key – Cylinder

18. Types of Locks Something you have – Keyed Something you know – Combinations Something you are - Biometric

19. Lock Attacks Lock picking Lock bumping

20. Lock Controls Lock and key control system Key control procedures Change combinations Fail – Soft – Secure – Safe

21. Other Electronic Physical Controls Card access Biometric access methods

22. Windows and Entry Points Standard plate glass Tempered glass Acrylic materials Polycarbonate windows Entry points

23. Intrusion Detection Systems (IDS) Closed circuit television Sensors and monitors

24. Escorts and Visitor Control Visitor access control best practices – Picture identity – Photographs – Enclosed area – Authorized escort

25. Access Logs Computerized log Closed circuit TV

26. Domain Agenda Site and Facility Design Criteria Perimeter Security Building and Inside Security Secure Operational Area

27. Equipment Room Perimeter enclosure Controls Policy

28. Data Processing Facility Small devices threat Server room Mainframes Storage

29. Communications and Power Wireless access points Network access control Utility and power rooms

30. Work Area Operators System administrators Restricted work areas

31. Equipment Protection Inventory Locks and tracing equipment Data encryption Disabling I/O ports

32. Environmental Controls System Electric power HBAC Water / plumbing Gas Refrigeration Threat Loss of power Overheating Flood / dripping Explosion Leakage

33. Fire Protection Prevention – reduce causes Detection – alert occupants Suppression – contain or extinguish

34. Materials and Suppression Agents TypeSuppression Agents Common combustiblesWater, foam, dry chemicals Combustible liquidsInter gas, CO 2, foam, dry chemicals ElectricalInert gas, CO 2, dry chemicals Combustible metalsDry powders Cooking media (fats)Wet chemicals

35. Flooding Area Coverage Water – sprinkler systems Gas – Halon/CO2/Argon systems Best practices for systems Portable extinguishers

36. Types of Electrical Power Faults Complete loss of power Power degradation Interference (noise) Grounding

37. Loss of Electrical Power UPS Generators Goals of power Power controls

38. Heating Ventilation Air Condition (HVAC) Location Positive pressure Maintenance

39. Other Infrastructure Threats Gas leakage Water threats

40. Key Performance Indicators # of physical security incidents detected # of false positives for biometrics