Penetration Testing mailing list archives

Re: [PEN-TEST] Datacenter Wiring


From: "McGann, J" <shadowjcm () MINDSPRING COM>
Date: Sat, 21 Oct 2000 14:52:03 -0400

At 10:14 AM 10/21/2000 -0400, Drew Simonis wrote:
Tom Litney wrote:
>
> >
> > This is a topic that I fear many of us do not take seriously because
it is
> > not a "geek" topic - physical security.
> .....
> > stonewall

(...)

>
>   My initial question was attempting to solicit an opinion from you, the
> experts.  Disregarding for a minute the hardware on either side of the wire
> and whether all traffic should be encrypted questions but focusing in on
> just the physical wire security.  You have been approached by one of your
> clients who is building a datacenter.  They are asking your opinion on how
> they should wire it to provide the best security against
penetration.  Which
> method would you recommend?  Are you a wire walker or a wire hider?  And
> why?


I suppose I am a wire hider.  I think a nice steel conduit is a heck
of a lot better than any other solution Ive heard.  And get this twist
I've heard about:  presurizing the conduit.  Charge that pipe up with
an inert gas, and if the conduit is broken, for any reason, an alarm is
generated.  I can't think of a more secure way to protect my cables,
can you?

There are some other solutions out there: for example the NSA/DOD approved
Cylink Corporation product that puts a fiberoptic wire across the cable
pipe.  When the pipe is knocked too hard or cut into, the vibration is
detected by the FO wire and an alarm sounds.  Similar to Drew's
pressurization suggestion above.  The alarms can be set to ignore
vibrations up to a certain level so as not to create too many false
alarms.  This is a great solution for situations where you are running wire
under ground between buildings on a business campus.


Peace, Jamie

HR
Fiderus Strategic Security & Privacy - Security for the Masses
|| HQ: 919-852-1900 || Cary: 919-654-6837 || TollFree: 866-FIDERUS ||
|| Mobile: 757-535-6605 || Pager: 866-787-1001 - 8667871001 () skytel com ||
|| Fiderus Computer Emergency Hotline # 1-877-595-8491||
|| <jmcgann () fiderus com> || <shadowjcm () mindspring com>  ||
"Energy & persistence conquer all things" -Benjamin Franklin


Current thread: