4月6日cissp2013核心章節(jié)培訓(xùn)課件-physical security

1、Physical SecurityXu Hui, CISSP: chi2013/2/16CISSP ExpecionsParticipate in site and facility design considerations參與選址和基礎(chǔ)設(shè)施設(shè)計(jì)考慮Support the implemen securityion and operation of perimeter支持安全實(shí)施Support the implemen支持內(nèi)部安全實(shí)施Support the implemen facility security.支持操作和設(shè)施安全ion and operation oferior securit

2、yion and operation of operations andParticipate in protection and securing of equipment參與設(shè)備安全防護(hù)2Topicsions 0. CISSP Expec 1. Site Selection and Facility Design選址和基礎(chǔ)設(shè)施設(shè)計(jì) 2. Perimeter Security安全 3. Building and Inside Security建筑和內(nèi)部安全 4. Environmental Control環(huán)境控制1. SITE AND FACILITY DESIGN選址和基礎(chǔ)設(shè)施設(shè)計(jì)Site

3、 Planning (場(chǎng)地規(guī)劃)When building a new facility there are several considerations Land Price(地價(jià)) Customopulation(客戶) Marketing strategy(市場(chǎng))More considerations for a security profes Location Threat(地點(diǎn)相關(guān)的安全威脅)alLocation ThreatsNatural Hazards Threats自然 Floods(洪水), earthquakes(), storms(暴風(fēng)雨),tornadoes(), f

4、ires(火災(zāi))Man Made Threats人為 Fire(火), smoke(煙), water(水) Crime()Utility Concern效用考慮Electrical(電力供應(yīng))Communications(通訊線路)Two ApproachHardening(目標(biāo)加固) Focuses on denying acs through physical and artifilbarriers(Eg, alarms, locks, fen)CPTED: Crime Prevention Through EnvironmentalDesign (通過環(huán)境設(shè)計(jì)預(yù)防) The idea

5、ist proper design of a physical environmentcan reduce crime by directly affecting human behavior.The Best Approach is usually to build an environment from CPTED approach and then applythe-hardening components on top of thedesign where neededCPTEDCPTED provides three main strategies Natural Acs Contr

6、ol: tries to controls flow of peopleentering and leaving a space by the placement of doors, fen,lighting and landsca.通過自然的控制措施控制人流，預(yù)防處帶有兩道門的和沒有門的商店哪個(gè)更容易成為目標(biāo)？CPTEDNatural Surveillance: to make criminals feelfortabyproviding many ways observers could potentially see them and tomake all otheople feel s

7、afe and comfortaby providing anopen and well-designed environment通過自然的監(jiān)督措施，預(yù)防CPTEDTerritorial reinforcement: Creating a spacet emphasizes aanizations sphere of influeno employees feel ownership oft space. It cso make criminals feel vulnerable or feeltthey do not belong there.通過領(lǐng)域強(qiáng)化，預(yù)防More Reference:

8、2. PERIMETER SECURITY安全Defense in Depth (縱深防御)Defending an asset with multipleture canreduce the likelihood of a sucsful attack.進(jìn)入CA區(qū)會(huì)經(jīng)過幾層控制？值班室機(jī)房機(jī)房Construction MaterialTimber(木材):Combustible Material(易燃材質(zhì))Glass(玻璃)Stone(石頭)Concrete(混凝土)Steel(鋼材)bustible(非易燃材質(zhì))德國福爾遇入室 米（Volksb）遭，混凝土墻壁厚度：0.9Barriers(

9、屏障)Natural Barriers(天然屏障)River(河)Mountain(山)Manmade Barriers (人工屏障)River(人工河) Fen(柵欄)Gates(門)Walls(墻壁)FenPerimeterInfrared Sensors紅外探測(cè)Microwave微波探測(cè)ruDetectionCoaxial Strain-Sensitive Cable同軸電纜探測(cè)Contentysis and Motion Panalysis分析和移動(dòng)路徑分析Infrared Sensor (紅外探測(cè))Passive Infrared Sensors are designed for h

10、uman body detection, by detect the heat emitted by animate forms.式紅外探測(cè)：探測(cè)人和動(dòng)物發(fā)射的紅外線，只有接收端Active Infrared Sensors(transmitter and receiver ) transmitand infrared signal via a transmitter. IR signal at the receiver indicates and blocked the path.erruption of the normalruder or objecs主動(dòng)式紅外探測(cè)：發(fā)射端發(fā)射紅外線，接

11、收端接收紅外線Passive Infrared SensorActive Infrared SensorMicrowave(微波探測(cè))Two configurations bi-sic（雙站模式） mono-sic（單站模式）Be aware of Nuisance（干擾和誤報(bào)）Strain-Sensitive Cable彎曲敏感-同軸電纜探測(cè) Used in outdoor, fence-mounted perimeter security applications.This sensor will detect an lifting the fence fabric byruder cut

12、ting through, climbing on or yzing the signals generated byflexing the cable. 主要用于戶外柵欄，者翻越柵欄時(shí)會(huì)造成同軸電纜變形，可通過探測(cè)其中傳輸?shù)哪M信號(hào)探測(cè)到行為。Media介質(zhì)Coaxial Cable同軸電纜Optical Cable光纖Tech技術(shù)Reflectometry (TDR)Transmissometry(TDT)Lighting(照明)Importance of Lights(照明重要性) Lighting is relatively inexpensive to maain and mayre

13、duce the need for securitynel降低對(duì)保安的需求 Increases the effectiveness of guard forand CCTV.增加防護(hù)措施和CCTVTerminology （術(shù)語）措施的有效性Responsive Area Illumination照明區(qū)域Glare Protection眩光防護(hù)Types of Lights(燈光類型)Fluorescent Lights(日光燈, 熒光燈)Not effective for outdoor lighting systemFor inside buildings and facilitiesMer

14、cury Vapor Lights(蒸氣燈)White-Bluishused for large area overhead lightingLong bulb lifeTake an amount of time to full lightTypes of Lights(燈光類型)Sodium Vapor(鈉氣燈)Soft yellow lightUsed in fogQuartz Lamps(石英燈)High wattageUsed on perimeters and troublesome areas where high visibility an scene is requiredI

15、nfrared IlluminatorsMost CCTV(Black/white) Cameras.y lightTypes of Lighting System (照明系統(tǒng))Continuous Light (持續(xù)照明系統(tǒng))Moveable Lighting(移動(dòng)照明系統(tǒng))Emergency Lighting(應(yīng)急照明系統(tǒng)) battery-backed lighting devicet comes on automatically er outagewhen a building experienaCCTV閉路電視Closed Circuitevi組成Cameras（攝相機(jī)）Outdoo

16、r Camera（戶外攝相機(jī)） Auto-Iris LensFixedition Camera （固定攝相機(jī)）Pan/Tilt/Zoom Camera （傾斜/移動(dòng)/變焦攝相機(jī)）Dome Camera（半球攝相機(jī)）IP Camera（IP攝相機(jī)） DigitalRecorder （系統(tǒng)） Monitor Display （顯示器）相機(jī)組成CCD：Charged-Coupled Device光感設(shè)備Camera TerminologyFocal Length（焦距）Auto Focus(自動(dòng)對(duì)焦)照相機(jī)通常是35mm光學(xué)焦點(diǎn)CCD鏡頭鏡頭焦距Depth of Field鏡頭焦距增大，景深變小Ca

17、mera TerminologyIris(光圈) Auto iris(自動(dòng)光圈): 對(duì)于環(huán)境照度處于經(jīng)常變化的情況，如隨日照時(shí)間而照度變化較大的門廳、窗及大堂內(nèi)等，均需選用自動(dòng)光圈鏡頭 Manual iris(手動(dòng)光圈): 對(duì)于在環(huán)境照度恒定的情況下,定鏡頭光圈大小，獲得滿意亮度畫面即可整光學(xué)焦點(diǎn)CCD光圈GuardsProprietary Security(雇傭工) Proprietary Security will include complete responsibility for the hiring, firing, and management.Contract Security

18、nel(外包式) working for a private security company which protects many locations.3. BUILDING AND INSIDE SECURITY建筑和內(nèi)部安全DoorDoor LocksElectronic LocksElectronic StrikesMagnetic LocksAntiPassback Mechanism (Acs Control)Magnetic Locks電磁鎖、RFID、生物識(shí)別三合一開關(guān) XX區(qū)Terminology(術(shù)語)Fail safeFail safe in any applicati

19、on means with no device it is unlocked.A magnetic lock by nature is only a fail safe device.Fail Secureer to the Fail secure means with noer to the device it is locked.Mantraps and TurnstilesThreat: Piggybacking/tailgatingConfirm there is only onepass throughMantrapTurnstileHigh End TurnstileLocksTu

20、mbler lock(杠桿鎖)Warded lock(撞鎖，凸塊鎖)Combination Lock鎖)Cipher Lock(BiometricsFingrBiometric ReaderHand Geometry ReaderFal ImageIris ReaderRetina ReaderMost AccurateThroughput: 2seconds Distance: 10 inchesLED LightThroughput: 10 seconds Distance: closeBiometricsFalse Rejection: authorized users are fals

21、ely rejected.Type I ErrorFalse Acceptance: Unauthorized users are falsely accepted.Type II ErrorErrorRateFARFRRCERSensitivitySafeFireproof and burglarproof(防盜) iron or steel chest used for storage of currency, negotiable securities, and similar valuablesVault (room)ContainerWindowsTempered Glass(鋼化玻

22、璃)Car windshield, washbasinResist breakage and will disegrateo small cubes of crystals with no sharpWired GlassWired meshAcrylic Glass (丙烯酸有機(jī)玻璃)CombustibleWindowsLaminated Glass (夾層玻璃)Street level windows, DoorwaysMade from two sheets of ordinary glass bonded to a middle layer of resint plastic.Bull

23、et Resistant Glass (玻璃) Bs, CarseriorruDetectionBalanced Magnetic Switch磁平衡開關(guān)Motion Activated Camera移動(dòng)感應(yīng)探測(cè)Acoustic Sensor聲音感應(yīng)探測(cè)Passive Infrared Sensor紅外感應(yīng)探測(cè)Proximity Sensor距離感應(yīng)探測(cè)A typical application of a capacitance proximity d a safe or file磁平衡開關(guān)紅外探測(cè)pction ofcabinetsDual Technology Sensor雙探測(cè)距離感應(yīng)探測(cè)

24、-壓力毯Balanced Magnetic Switch磁平衡開關(guān)While infrared radiation is invisible to the human eye, infrared radiation emitted by an object is directly related to its temperature.The infrared regions betn 0.75 and1,000 micrometers. The human bodyradiates infrared energyhe 8 to 14micrometer region.散發(fā)紅外微波波長8-14微

25、米Passive Infrared Sensor紅外感應(yīng)探測(cè)Escort and Visitor ControlTemporary badges(訪客牌)Visitor Management System Pen and Pr Computer based4 ENVIRONMENTAL CONTROL環(huán)境控制Fire ClassificationAmericanEuropean歐洲Fuel/Heat source火源AAOrdinary combustibles普通易燃材質(zhì)BB,CFlammable liquids, gases易燃液體、氣體CEElectrical equipment電器DD

26、Combustible metals金屬KFCooking oil or fat廚房油中國分類（GB/T4968-2008）火災(zāi)分類A 類火災(zāi)：固體物質(zhì)火災(zāi)。這種物質(zhì)通常具有有機(jī)物性質(zhì)，一般在燃燒時(shí)能產(chǎn)生灼熱的余燼。B 類火災(zāi)：液體或可熔化的固體物質(zhì)火災(zāi)。C 類火災(zāi)：氣體火災(zāi)。D 類火災(zāi)：金屬火災(zāi)。E 類火災(zāi)：帶電火災(zāi)。物體帶電燃燒的火災(zāi)。F 類火災(zāi)：烹飪器具內(nèi)的烹飪物（如動(dòng)植物油脂）火災(zāi)。滅火水：主要用于A類火災(zāi)：主要用于B類火災(zāi)，燃燒表面和火干粉：B類或E類，有腐蝕性濕粉：廚房火災(zāi)F鹵化烷（ Halon ）：能救滅D類以外的火，用于飛機(jī)等精密儀器。由于鹵化烷屬氯氟化碳，會(huì)對(duì)臭氧層造成破壞，

27、因此正逐漸被（細(xì)水霧、氟化碳合物）取代。Fire SuppresSystem1：火災(zāi)探測(cè)器2：火災(zāi)控制器3：滅火控制器4：滅火閥主要分類：Fire SuppresSprinkler System 水滅火系統(tǒng)Gaseous fire suppressystem 氣體滅火系統(tǒng)：用于機(jī)房環(huán)境Fire DetectionFlame Detectors(火苗探測(cè))Smoke Detectors (煙感)Air-samplingcarbon dioxide sensorIonizationHeat Detectors (熱探測(cè))Gaseous fire suppres七氟丙烷氣體滅火系統(tǒng)system七氟丙

28、烷火警流程Fire SuppresDeluge System: open sprinklersSprinkler SystemWet Sprinkler System: automatic sprinklers, Constant supply of water;Dry Sprinkler System: automatic sprinklers, Do no them;ve water inPre Action System: incorporate a detection system; offer a second level of protection against accident

29、al discharge of water and aremostly used in plawhere the accidental discharge of water ishighly undesirable, for example monuments.useums or historical buildings-PrincipleLife safety goals should always be #1 priority人身安全是最重要的原則er Supply(供電)UPS:Unerruptibleer Supply(不間斷供電系統(tǒng)) A backup systemBatteries

30、 to guarantee continuousA few minutes (15min)Providing surge protectionOnline, Standlyerer SupplyGenerator(發(fā)電機(jī)) Generatorer iivated automaticallyhe event ofaer failure by the transfer switch Active within 10 seconds Run on diesel fuel(柴油) and can be located outside of the facility or inside parking garageer SupplyElectronic Wirephase/live wire(火線)neutral wire(零線)grounding/earth wi