Physical Security

Question 1

Physical security

Answer 1

Measures to protect, tangible assets (buildings, equipment, people) from harm or unauthorized access

Question 2

Physical Security Controls

Answer 2

• fencing and bollards
• brute force attacks
• surveillance systems
• access control vestibules
• access badges

Question 3

Fencing and Bollards

Answer 3

Fences - barriers made of posts and wire or boards to enclose or separate areas

Bollards - short, sturdy vertical posts controlling or preventing vehicle access

Question 4

Brute force attacks

Answer 4

• Forcible entry
• Tampering with security personnel
• Confronting security personnel
• Ramming a barrier with a vehicle

Question 5

Surveillance Systems

Answer 5

• An organized strategy to observe and report activities

components:
- Video surveillance
- security guards
- lighting
- sensors

Question 6

Access Control Vestibules

Answer 6

Double door system electronically controlled to allow only one door open at a time
- prevents piggybacking and tailgating
- usually integrated with electronic badges and operated by security guard at the entrance to a secure facility

Question 7

Piggybacking

Answer 7

Involves two people working together - one person has legit access intentionally allowing another person who doesn’t have proper authorization to enter a secure area

Question 8

Tailgaiting

Answer 8

Occurs when an unauthorized person closely follows someone through the access control vestibule who has legit access to the secure space without their knowledge or consent

Question 9

Door Locks

Answer 9

• Padlocks
• Pin and tumbler locks
• Numeric locks
• Wireless locks
• Biometric locks
• Cipher locks
• Electronics access control systems

Question 10

Access Badges

Answer 10

Use of Radio Frequency Identification (RFID) or Near Field Communication (NFC) or magnetic strips

Question 11

Security guards

Answer 11

after at access control vestibules because they provide
- visual detterent
- assistance
- check identity
- response

Question 12

Biometric challenges

Answer 12

False Acceptance Rates (FAR) - occurs when the system erroneously authenticates an unauthorized user; can be lowered by increasing scanner sensitivity

False Rejection Rate (FRR) - Denies access to an authorized user; adjusting sensitivity can increase FRR

Crossover Error Rate (CER) - A balance between FAR AND FRR for optimal authentication effectiveness

Question 13

Cipher Locks

Answer 13

Mechanical locks with numbered push buttons, requiring a correct combination to open
- commonly used in high security area like sever rooms
- secure entry areas in office buildings, often using electronic access systems with badges and PINs for authentication

Question 14

Access Badge Cloning

Answer 14

Copying the data from an RFID or NFC card badge onto another card or device

Step 1: Scanning - scan or read the targeted individual’s access badge
Step 2: Data Extraction - attacker extract the relevant authentication credentials from the card like unique id or set of encrypted data
Step 3: Writing to a new card or device - transfer the info to a new card or compatible device
Step 4: Attackers gain unauthorized access to buildings, computer systems, or make payments using a cloned NFC- enabled card

Question 15

How to stop access badge cloning

Answer 15

• Implement advanced encryption in you card-based authentication system
• MFA
• Regularly update your security protocols
• Educate users
• implement the use of sheilded wallets or sleeves with your RFID access badges
• Monitor and audit your access logs