Network Defense Andcountermeasuresby Chuck Easttomchapter 14 Physical ✓ Solved

Network Defense and Countermeasures by Chuck Easttom Chapter 14: Physical Security and Disaster Recovery © 2014 by Pearson Education, Inc. Chapter 14 Physical Security and Disaster Recovery 2 Objectives ï® Understand Physical Security ï® Implement Physical Security ï® Understand Disaster Recovery ï® Understand Business Continuity Definition: Physical Security ï® The physical measures and their associated procedures to safeguard and protect against: ï± Damage ï± Loss ï± Theft © 2014 by Pearson Education, Inc. Chapter 14 Physical Security and Disaster Recovery 3 Required Physical Controls ï® Perimeter and Building Grounds ï® Building Entry Points ï® Inside the Building – Building Floors / Offices ï® Data Centers or Server Room Security ï® Computer Equipment Protection © 2014 by Pearson Education, Inc.

Chapter 14 Physical Security and Disaster Recovery 4 Examples of Threats ï® Emergencies ï± Fire and Smoke Contaminants ï± Building Collapse or Explosion ï± Utility Loss (Power, AC, Heat) ï± Water Damage (Broken Pipes) © 2014 by Pearson Education, Inc. Chapter 14 Physical Security and Disaster Recovery 5 Fire Prevention ïµ Use Fire Resistant Materials for Walls, Doors, Furnishings, etc. ïµ Reduce the Amount of Combustible Papers Around Electrical Equipment ïµ Provide Fire Prevention Training to Employees ïµ REMEMBER: Life Safety is the Most Important Issue! ïµ Conduct Fire Drills on All Shifts So that Personnel Know How to Exit A Building © 2014 by Pearson Education, Inc. Chapter 14 Physical Security and Disaster Recovery 6 Fire Detection ïµ Automatic Dial-Up Fire Alarm ïµ System Dials the Local Fire or Police Department and Plays a Prerecorded Message When a Fire is Detected ïµ Usually Used in Conjunction with One of the Other Type of Fire Detectors ïµ This Type of System Can Be Easily/Intentionally Subverted ïµ Combinations are Usually Used for The Best Effectiveness in Detecting a Fire © 2014 by Pearson Education, Inc.

Chapter 14 Physical Security and Disaster Recovery 7 Fire Suppression ï® Carbon Dioxide (CO2), Foam, Inert Gas and Dry Power Extinguishers DISPLACE Oxygen to Suppress a Fire ï® CO2 Is a Risk to Humans (Because of Oxygen Displacement) ï® Water Suppresses the Temperature Required to Sustain a Fire © 2014 by Pearson Education, Inc. Chapter 14 Physical Security and Disaster Recovery 8 Fire Suppression - Halon ïµ Halon Banned for New Systems Under 1987 Montreal Protocol on Substances that Deplete the Ozone Layer ïµ Began Implementation of Ban in 1992 ïµ Any New Installations of Fire Suppression systems Must Use Alternate Options ïµ EU Requires Removal of Halon for Most Applications ïµ Halon Replacements: ïµ FM200, © 2014 by Pearson Education, Inc.

Chapter 14 Physical Security and Disaster Recovery 9 Safety Fire Extinguishers ï® Class A – Ordinary combustibles such as wood or paper. ï® Class B – Flammable liquids such as grease, oil, or gasoline. ï® Class C – Electrical Equipment ï® Class D – Flammable Metals © 2014 by Pearson Education, Inc. Chapter 14 Physical Security and Disaster Recovery 10 Fire Suppression - Water ïµ Wet Pipe ïµ Always Contains Water ïµ Most Popular and Reliable ïµ 165° Fuse Melts ïµ Can Freeze in Winter ïµ Pipe Breaks Can Cause Floods ïµ Dry Pipe ïµ No Water in Pipe ïµ Preferred for Computer Installations ïµ Water Held Back by Clapper ïµ Air Blows Out of Pipe, Water Flows © 2014 by Pearson Education, Inc. Chapter 14 Physical Security and Disaster Recovery 11 Fire Suppression – Water ï® Deluge ï± Type of Dry Pipe ï± Water Discharge is Large ï± Not Recommended for Computer Installations ï® Preaction ï± Most Recommended for Computer Room ï± Combines Both Dry and Wet Pipes ï± Water Released into Pipe First Then After Fuse Melts in Nozzle the Water is Dispersed © 2014 by Pearson Education, Inc.

Chapter 14 Physical Security and Disaster Recovery 12 What Is a Disaster ï® Any natural or man-made event that disrupts the operations of a business in such a significant way that a considerable and coordinated effort is required to achieve a recovery. © 2014 by Pearson Education, Inc. Chapter 14 Physical Security and Disaster Recovery 13 How BCP and DRP Support Security ï® BCP (Business Continuity Planning) and DRP (Disaster Recovery Planning) ï® Security pillars: C-I-A ï± Confidentiality ï± Integrity ï± Availability ï® BCP and DRP directly support availability © 2014 by Pearson Education, Inc. Chapter 14 Physical Security and Disaster Recovery 14 BCP and DRP Differences and Similarities ï® BCP ï± Activities required to ensure the continuation of critical business processes in an organization ï± Alternate personnel, equipment, and facilities ï± Often includes non-IT aspects of business ï® DRP ï± Assessment, salvage, repair, and eventual restoration of damaged facilities and systems ï± Often focuses on IT systems © 2014 by Pearson Education, Inc.

Chapter 14 Physical Security and Disaster Recovery 15 The Role of Prevention ï® Not prevention of the disaster itself ï± Prevention of surprise and disorganized response ï® Reduction in impact of a disaster ï± Better equipment bracing ï± Better fire detection and suppression ï± Contingency plans that provide [near] continuous operation of critical business processes ï± Prevention of extended periods of downtime © 2014 by Pearson Education, Inc. Chapter 14 Physical Security and Disaster Recovery 16 Running a BCP / DRP Project ï® Main phases ï± Pre-project activities ï± Perform a Business Impact Assessment (BIA) ï± Develop business continuity and recovery plans ï± Test resumption and recovery plans © 2014 by Pearson Education, Inc.

Chapter 14 Physical Security and Disaster Recovery 17 Performing a Business Impact Analysis ï® Asset Analysis ï± Purchase cost, development cost, administrative cost, maintenance cost. ï® Survey critical processes ï® Perform risk analyses and threat assessment ï® Determine Maximum Tolerable Downtime (MTD) ï® Establish key recovery targets © 2014 by Pearson Education, Inc. Chapter 14 Physical Security and Disaster Recovery 18 RAID ï® RAID 0 (striped disks) distributes data across multiple disks in a way that gives improved speed at any given instant. NO fault tolerance ï® RAID 1 mirrors the contents of the disks, making a form of 1:1 ratio realtime backup. Also called mirroring ï® RAID 3 or 4 (striped disks with dedicated parity) combines three or more disks in a way that protects data against loss of any one disk.

Fault tolerance is achieved by adding an extra disk to the array and dedicating it to storing parity information. The storage capacity of the array is reduced by one disk ï® RAID 5 (striped disks with distributed parity) combines three or more disks in a way that protects data against the loss of any one disk. It is similar to RAID 3 but the parity is not stored on one dedicated drive, instead parity information is interspersed across the drive array. The storage capacity of the array is a function of the number of drives minus the space needed to store parity ï® RAID 6 (striped disks with dual parity) combines four or more disks in a way that protects data against loss of any two disks. ï® RAID 1+0 (or 10) is a mirrored data set (RAID 1) which is then striped (RAID 0), hence the "1+0" name.

A RAID 1+0 array requires a minimum of four drives: two mirrored drives to hold half of the striped data, plus another two mirrored for the other half of the data. © 2014 by Pearson Education, Inc. Chapter 14 Physical Security and Disaster Recovery 19 Backups ï® Full - all changes ï® Differential – all changes since last full backup ï® Incremental – all changes since last backup of any type © 2014 by Pearson Education, Inc. Chapter 14 Physical Security and Disaster Recovery 20 Summary ï® Physical security involves lighting, locks, fences, and physical access control. ï® Fire suppression systems are an important part of physical security. ï® A Business Impact Analysis must be done before disaster recovery. ï® RAID is a fundamental part of fault tolerance. © 2014 by Pearson Education, Inc.

Chapter 14 Physical Security and Disaster Recovery 21 Summary cont. ï® Disaster Recovery Plans are aimed at restoring full normal operations. ï® Business Continuity Plans are designed to maintain some level of operations until full recovery can be achieved. ï® Data backups are a significant part of fault tolerance and disaster recovery. © 2014 by Pearson Education, Inc. Chapter 14 Physical Security and Disaster Recovery 22 Rubic_Print_Format Course Code Class Code Assignment Title Total Points NRS-451VN NRS-451VN-O503 Health Organization Evaluation 180.0 Criteria Percentage Unsatisfactory (0.00%) Less Than Satisfactory (65.00%) Satisfactory (75.00%) Good (85.00%) Excellent (100.00%) Comments Points Earned Content 80.0% Health Care Organization or Network 15.0% Health care organization or network is not described.

Health care organization or network is partially presented. There are significant omissions and inaccuracies. Health care organization or network is summarized. Some information is needed. There are minor inaccuracies related to the representation of the organization or network.

Health care organization or network is described. Some detail is needed for clarity. Health care organization or network is clearly and accurately described. Assessment of Overall Organizational Readiness 15.0% Assessment of overall organizational readiness is omitted. Assessment of overall organizational readiness is partially presented.

There are significant omissions. Degree of organizational readiness is not established. Assessment of overall organizational readiness is summarized. Degree of organizational readiness is partially established. More information, rationale, and support are needed.

Assessment of overall organizational readiness is described. Degree of organizational readiness is generally established. Some evidence or rationale is needed for support. Assessment of overall organizational readiness is described in detail. Degree of organizational readiness is established.

Strong evidence and rationale support the assessment. Strategic Plan 20.0% Strategic plan is omitted. Strategic plan is partially presented. Plan contains major omissions. The plan fails to address issues outlined in the assignment criteria.

The strategic plan generally addresses network growth, nurse staffing, resource management, and patient satisfaction. More information, rationale, and support are needed. The strategic plan addresses network growth, nurse staffing, resource management, and patient satisfaction. Some evidence or rationale is needed for support. The strategic plan is well developed.

Network growth, nurse staffing, resource management, and patient satisfaction are addressed in detail. The plan is supported with strong evidence and rationale. Identification of Current or Potential Issues in Organizational Culture and Impact of These to Strategic Plan 15.0% Current or potential issues in the organizational culture and the impact of these to strategic plan are omitted. Current or potential issues in the organizational culture are partially summarized. The potential impact of these on the strategic plan is unclear.

There are omissions and inaccuracies throughout. Current or potential issues in the organizational culture are generally discussed. The impact of these on the strategic plan is summarized. Evidence and rationale are needed to support claims. Current or potential issues in the organizational culture and the potential impact of these on the strategic plan are discussed.

Some evidence or rationale is needed. Current or potential issues in the organizational culture are clearly identified. The potential impact of these on the strategic plan is thoroughly described and supported with evidence and rationale. Theory or Model to Support Implementation of Strategic Plan 15.0% Theory or model to support strategic plan implementation is omitted. Theory or model to support strategic plan implementation is partially described.

It is unclear how the theory or model would support implementation of strategic plan for the organization. Theory or model to support strategic plan implementation is proposed. The theory or model demonstrates some support for implementation of the strategic plan for the organization. It is unclear why this theory or model is the best choice. More information is needed.

Theory or model to support strategic plan implementation is proposed. The theory or model demonstrates support for implementation of the strategic plan for the organization. General rationale is provided for why the theory or model is the best choice. Theory or model to support strategic plan implementation is proposed. The theory or model demonstrates strong support for implementation of the strategic plan for the organization.

Compelling rationale supports why the theory or model is the best choice. Organization, Effectiveness, and Format 20.0% Thesis Development and Purpose 5.0% Paper lacks any discernible overall purpose or organizing claim. Thesis is insufficiently developed or vague. Purpose is not clear. Thesis is apparent and appropriate to purpose.

Thesis is clear and forecasts the development of the paper. Thesis is descriptive and reflective of the arguments and appropriate to the purpose. Thesis is comprehensive and contains the essence of the paper. Thesis statement makes the purpose of the paper clear. Argument Logic and Construction 5.0% Statement of purpose is not justified by the conclusion.

The conclusion does not support the claim made. Argument is incoherent and uses noncredible sources. Sufficient justification of claims is lacking. Argument lacks consistent unity. There are obvious flaws in the logic.

Some sources have questionable credibility. Argument is orderly but may have a few inconsistencies. The argument presents minimal justification of claims. Argument logically, but not thoroughly, supports the purpose. Sources used are credible.

Introduction and conclusion bracket the thesis. Argument shows logical progression. Techniques of argumentation are evident. There is a smooth progression of claims from introduction to conclusion. Most sources are authoritative.

Clear and convincing argument presents a persuasive claim in a distinctive and compelling manner. All sources are authoritative. Mechanics of Writing (includes spelling, punctuation, grammar, language use) 5.0% Surface errors are pervasive enough that they impede communication of meaning. Inappropriate word choice or sentence construction is used. Frequent and repetitive mechanical errors distract the reader.

Inconsistencies in language choice (register) or word choice are present. Sentence structure is correct but not varied. Some mechanical errors or typos are present, but they are not overly distracting to the reader. Correct and varied sentence structure and audience-appropriate language are employed. Prose is largely free of mechanical errors, although a few may be present.

The writer uses a variety of effective sentence structures and figures of speech. Writer is clearly in command of standard, written, academic English. Paper Format (use of appropriate style for the major and assignment) 2.0% Template is not used appropriately, or documentation format is rarely followed correctly. Appropriate template is used, but some elements are missing or mistaken. A lack of control with formatting is apparent.

Appropriate template is used. Formatting is correct, although some minor errors may be present. Appropriate template is fully used. There are virtually no errors in formatting style. All format elements are correct.

Documentation of Sources (citations, footnotes, references, bibliography, etc., as appropriate to assignment and style) 3.0% Sources are not documented. Documentation of sources is inconsistent or incorrect, as appropriate to assignment and style, with numerous formatting errors. Sources are documented, as appropriate to assignment and style, although some formatting errors may be present. Sources are documented, as appropriate to assignment and style, and format is mostly correct. Sources are completely and correctly documented, as appropriate to assignment and style, and format is free of error. Total Weightage 100%

Paper for above instructions

Introduction

As organizations increasingly rely on technology to support their operations, ensuring the safety and security of physical assets becomes a paramount concern. This comprehensive analysis will delve into the principles and practices of physical security as described in Chapter 14 of Chuck Easttom's Network Defense and Countermeasures. The discussion will encompass the critical elements of physical security measures, the identification of threats, fire prevention and detection systems, disaster recovery, and business continuity plans.

Understanding Physical Security

Physical security is defined as the measures applied to safeguard physical assets against threats such as damage, loss, or theft (Easttom, 2014). The core objectives of physical security are to safeguard facilities, protect data, and maintain operational integrity in the face of various hazards.

Required Physical Controls

The implementation of effective physical security involves several key controls:
1. Perimeter and Building Grounds: Organizations should invest in fences, barriers, and surveillance technologies to create a secure perimeter. These measures deter unauthorized access (Easttom, 2014).
2. Building Entry Points: Entry points should employ various access control systems such as biometric scanners, electronic locks, security personnel, and visitor logs to monitor who enters and leaves the facility.
3. Inside the Building: Inside, security measures should extend to critical areas such as data centers and server rooms, often requiring additional controls like fire suppression systems and climate control.
4. Computer Equipment Protection: Regular audits of computer equipment are essential to ensure that it is secure, maintained, and safeguarded from damage (Easttom, 2014).

Identifying Threats

Potential threats to physical security can be categorized into various emergencies, including (Easttom, 2014):
- Fire and Smoke Contaminants: Fire can compromise not only physical assets but also human safety. Proper measures must be taken to minimize the risk.
- Building Collapse or Explosion: Natural disasters or structural failures can lead to catastrophic losses if proper precautions are not in place.
- Utility Loss: Loss of power, heating, or cooling can have dire repercussions on operations.
- Water Damage: Issues like broken pipes can quickly lead to significant damage if not addressed promptly.

Fire Prevention

Effective fire prevention strategies are crucial in protecting physical assets. Some of the recommended practices include (Easttom, 2014):
1. Use of Fire-Resistant Materials: Walls, doors, and furnishings should be made of materials that are less combustible to minimize fire spread.
2. Reducing Combustible Materials: Limiting the accumulation of papers and other combustibles near electrical equipment can significantly reduce fire hazards.
3. Employee Training: Regular fire prevention training ensures that personnel are aware of safety protocols and can respond appropriately to emergencies.
4. Conducting Fire Drills: Regular fire drills help familiarize staff with evacuation procedures, ensuring safety and a swift response in a real emergency.

Fire Detection and Suppression

The capabilities of fire detection and suppression systems play a key role in an effective physical security strategy. Fire detection systems such as automatic dial-up fire alarms can notify local fire services immediately upon detection of a fire (Easttom, 2014).

Fire Suppression Systems

Different fire suppression systems serve various purposes:
- Carbon Dioxide (CO2), Foam, and Dry Powder Extinguishers: These agents displace oxygen to suppress fires but carry risks due to oxygen deprivation for humans.
- Water-Based Systems: Wet pipe systems, while reliable, can cause damage during freezing temperatures. Dry pipe systems, which only release water when triggered, are often preferred for data centers.
- Alternative Suppressants: Due to environmental regulations, options like Halon are discouraged, with replacements such as FM200 being recommended.

Disaster Recovery Planning

Disasters can be classified as either natural or man-made events that severely disrupt business operations (Easttom, 2014). A comprehensive disaster recovery plan (DRP) is essential to minimize downtime and recover operations.

Business Continuity Planning (BCP)

BCP focuses on ensuring the continuation of critical processes post-disaster. This includes identifying personnel, equipment, and facilities that are essential for making a swift recovery. The alignment of BCP and DRP supports the key security pillars—confidentiality, integrity, and availability (Easttom, 2014).

Key Differences

While BCP deals with the continuation of business operations, DRP primarily emphasizes the restoration of physical assets and data systems. Plans must encompass both IT and non-IT aspects to ensure a comprehensive recovery strategy.

Role of Prevention

Rather than focusing solely on preventing the disaster, planning should prioritize preventing disorganized responses and minimizing impacts. This involves robust planning for critical business operations, improving detection systems, and creating comprehensive contingency plans (Easttom, 2014).

Business Impact Analysis (BIA)

A Business Impact Analysis serves to ascertain how key business functions would be affected in a disaster scenario, assessing potential losses and identifying maximum tolerable downtimes (Easttom, 2014).

The Technology within Security

The implementation of advanced data storage solutions such as RAID can provide fault tolerance. Various configurations like RAID 1, RAID 5, and RAID 10 offer different balances between performance and fault tolerance (Easttom, 2014).

Backup Strategies

Backup strategies include full backups, differential backups, and incremental backups, all of which play crucial roles in data recovery post-disaster. Having a clear backup strategy is key to ensuring that an organization can quickly restore operations (Easttom, 2014).

Conclusion

The importance of physical security and disaster recovery cannot be overstated. Organizations must take proactive measures to protect against various threats, ensure safety, and maintain operational continuity. By implementing comprehensive physical security measures, conducting fire prevention trainings, and developing effective disaster recovery and business continuity plans, organizations can significantly enhance their resilience in the face of potential disruptions.

References

1. Easttom, C. (2014). Network Defense and Countermeasures: Chapter 14 Physical Security and Disaster Recovery. Pearson Education, Inc.
2. Anderson, R. (2020). Security Engineering: A Guide to Building Dependable Distributed Systems. John Wiley & Sons.
3. Stallings, W., & Brown, L. (2016). Computer Security: Principles and Practice. Pearson Education.
4. Whitman, M. E., & Mattord, H. J. (2016). Principles of Information Security. Cengage Learning.
5. Tipton, H. F., & Krause, M. (2017). Information Security Management Handbook. CRC Press.
6. Landoll, D. J. (2016). The Security Risk Assessment Handbook. Auerbach Publications.
7. NIST. (2018). Framework for Improving Critical Infrastructure Cybersecurity. National Institute of Standards and Technology.
8. Ylonen, T., & Douceur, J. (2016). The Importance of Physical Security. IEEE Security & Privacy.
9. Peltier, T. R. (2016). Information Security Policies, Procedures, and Standards: A Practitioner's Guide. Auerbach Publications.
10. ISO/IEC. (2018). Information Technology – Security Techniques – Information Security Risk Management.
By understanding and implementing effective physical security strategies alongside robust disaster recovery plans, organizations can safeguard their assets and ensure sustained operational continuity in today’s increasingly volatile environment.