1
00:00:00,090 --> 00:00:01,440
In this section of the course,

2
00:00:01,440 --> 00:00:03,001
we're going to be focused on physical security

3
00:00:03,001 --> 00:00:04,911
including its security control measures,

4
00:00:04,911 --> 00:00:05,744
the attacks focused

5
00:00:05,744 --> 00:00:07,770
against the physical security of our networks,

6
00:00:07,770 --> 00:00:10,200
and methods to counter these types of attacks.

7
00:00:10,200 --> 00:00:12,360
Now, physical security refers to measures taken to

8
00:00:12,360 --> 00:00:15,510
protect tangible assets like your buildings, your equipment,

9
00:00:15,510 --> 00:00:18,669
your people from any kind of harm or unauthorized access.

10
00:00:18,669 --> 00:00:21,267
For example, a company may install surveillance cameras

11
00:00:21,267 --> 00:00:24,030
and employee security guards to monitor its premises

12
00:00:24,030 --> 00:00:26,040
to ensure that unauthorized individuals cannot

13
00:00:26,040 --> 00:00:28,980
gain entry or tamper with their critical infrastructure.

14
00:00:28,980 --> 00:00:30,061
Now in this section of the course,

15
00:00:30,061 --> 00:00:32,970
we're going to be focused on domain one and domain two

16
00:00:32,970 --> 00:00:36,379
with a specific focus on objectives 1.2 and 2.4.

17
00:00:36,379 --> 00:00:38,910
Objective 1.2 states that you must be able to

18
00:00:38,910 --> 00:00:40,729
summarize fundamental security concepts

19
00:00:40,729 --> 00:00:42,900
and specifically here, we'll be focused on

20
00:00:42,900 --> 00:00:45,120
the physical security concepts and tools covered

21
00:00:45,120 --> 00:00:46,170
under this objective.

22
00:00:47,434 --> 00:00:48,267
Objective 2.4, on the other hand,

23
00:00:48,267 --> 00:00:49,710
is going to focus on the different attacks that we

24
00:00:49,710 --> 00:00:51,989
try to use to overcome physical security controls

25
00:00:51,989 --> 00:00:54,180
because objective 2.4 states,

26
00:00:54,180 --> 00:00:55,200
given a scenario,

27
00:00:55,200 --> 00:00:56,910
you must be able to analyze indicators

28
00:00:56,910 --> 00:00:58,131
of malicious activities.

29
00:00:58,131 --> 00:00:59,850
Now, as we kick off this section,

30
00:00:59,850 --> 00:01:00,683
we're going to start

31
00:01:00,683 --> 00:01:02,580
from the outside, and then we're going to work our way in

32
00:01:02,580 --> 00:01:04,379
as we start trying to protect our critical data

33
00:01:04,379 --> 00:01:06,330
and staff members who are working inside

34
00:01:06,330 --> 00:01:07,980
of our organizational facilities.

35
00:01:07,980 --> 00:01:10,889
So we'll first start out by discussing fencing and bollards.

36
00:01:10,889 --> 00:01:12,840
Now, bollards are short, sturdy

37
00:01:12,840 --> 00:01:14,520
vertical posts designed to control

38
00:01:14,520 --> 00:01:17,760
or prevent access by vehicles to an area or structure.

39
00:01:17,760 --> 00:01:18,960
Fences on the other hand,

40
00:01:18,960 --> 00:01:20,040
are barriers that are usually made

41
00:01:20,040 --> 00:01:22,500
of posts and wire, or boards that are erected to

42
00:01:22,500 --> 00:01:24,990
enclose a space or separate areas.

43
00:01:24,990 --> 00:01:26,580
Next, we'll cover the different types

44
00:01:26,580 --> 00:01:27,809
of brute force attacks that are focused

45
00:01:27,809 --> 00:01:29,580
against our physical security,

46
00:01:29,580 --> 00:01:30,531
including forcible entry,

47
00:01:30,531 --> 00:01:32,640
tampering with security devices,

48
00:01:32,640 --> 00:01:34,050
confronting security personnel,

49
00:01:34,050 --> 00:01:36,210
and ramming a barrier with a vehicle.

50
00:01:36,210 --> 00:01:37,950
Then we'll focus on our coverage

51
00:01:37,950 --> 00:01:40,380
of surveillance systems and how to bypass them.

52
00:01:40,380 --> 00:01:42,510
A surveillance system is an organized strategy

53
00:01:42,510 --> 00:01:44,820
or setup designed to observe and report activities

54
00:01:44,820 --> 00:01:45,786
within a given area.

55
00:01:45,786 --> 00:01:47,840
These surveillance systems usually are made up

56
00:01:47,840 --> 00:01:50,010
of video surveillance, security guards,

57
00:01:50,010 --> 00:01:51,061
lighting and sensors,

58
00:01:51,061 --> 00:01:52,830
and we're going to explore the various ways

59
00:01:52,830 --> 00:01:55,200
an attacker might try to trick your surveillance systems

60
00:01:55,200 --> 00:01:56,170
and your sensors.

61
00:01:56,170 --> 00:01:59,010
After that, we're going to explore access control vestibules,

62
00:01:59,010 --> 00:02:02,130
and how they can help prevent piggybacking and tailgating.

63
00:02:02,130 --> 00:02:04,402
An access controlled festival is a double-door system

64
00:02:04,402 --> 00:02:06,189
that's designed with two doors that are electronically

65
00:02:06,189 --> 00:02:08,378
controlled to ensure the only one door can be open

66
00:02:08,378 --> 00:02:09,759
at a given time.

67
00:02:09,759 --> 00:02:13,080
Piggybacking typically involves two people working together

68
00:02:13,080 --> 00:02:15,060
with one person who has legitimate access

69
00:02:15,060 --> 00:02:16,770
intentionally allowing another person

70
00:02:16,770 --> 00:02:18,091
who doesn't have legitimate access

71
00:02:18,091 --> 00:02:20,101
to enter a secure area with them.

72
00:02:20,101 --> 00:02:21,840
Tailgating, on the other hand,

73
00:02:21,840 --> 00:02:24,030
occurs whenever an unauthorized person follows

74
00:02:24,030 --> 00:02:25,170
closely behind somebody who

75
00:02:25,170 --> 00:02:27,729
is authorized to go through that access control investible,

76
00:02:27,729 --> 00:02:30,750
and that way the unauthorized person can make their way

77
00:02:30,750 --> 00:02:32,880
into the secure space without the knowledge or consent

78
00:02:32,880 --> 00:02:34,740
of the authorized party.

79
00:02:34,740 --> 00:02:36,990
Next, we'll take a look at various types of door locks

80
00:02:36,990 --> 00:02:38,850
that you may choose from when developing your physical

81
00:02:38,850 --> 00:02:40,119
security and mitigation plans.

82
00:02:40,119 --> 00:02:43,050
These various locks include things like padlocks,

83
00:02:43,050 --> 00:02:44,310
simple pin and tumbler locks,

84
00:02:44,310 --> 00:02:45,839
numeric locks, wireless locks,

85
00:02:45,839 --> 00:02:48,240
biometric locks, cipher locks,

86
00:02:48,240 --> 00:02:50,430
electronic access systems and more.

87
00:02:50,430 --> 00:02:51,263
I'll also demonstrate how easy it's to pick

88
00:02:51,263 --> 00:02:54,729
a pin and tumbler lock based on a lock like a padlock

89
00:02:54,729 --> 00:02:56,850
so you can see just how quickly these simplified

90
00:02:56,850 --> 00:02:59,349
access controls can be defeated by a skilled attacker.

91
00:02:59,349 --> 00:03:02,430
Then we'll take a look at access badges in depth

92
00:03:02,430 --> 00:03:04,890
and explore how access badge cloning is going to be performed

93
00:03:04,890 --> 00:03:05,970
by an attacker.

94
00:03:05,970 --> 00:03:08,550
In many of our modern electronic access control systems,

95
00:03:08,550 --> 00:03:11,609
we use RFID or NFC based access control badges

96
00:03:11,609 --> 00:03:12,690
to gain access

97
00:03:12,690 --> 00:03:14,458
to our offices and other secure spaces.

98
00:03:14,458 --> 00:03:16,410
So we'll cover the technology

99
00:03:16,410 --> 00:03:18,540
behind these access badges as well as providing you

100
00:03:18,540 --> 00:03:20,760
with a quick demonstration so you can see how easy it is

101
00:03:20,760 --> 00:03:23,160
for an attacker to conduct access badge cloning

102
00:03:23,160 --> 00:03:25,800
using an awesome little physical penetration tool known

103
00:03:25,800 --> 00:03:26,829
as the Flipper Zero.

104
00:03:26,829 --> 00:03:29,160
Finally, we'll take a short quiz to see what you learned

105
00:03:29,160 --> 00:03:31,200
during this section of the course and review each

106
00:03:31,200 --> 00:03:32,439
of those quiz questions fully to ensure you

107
00:03:32,439 --> 00:03:35,020
can explain why the right answer was right for each one.

108
00:03:35,020 --> 00:03:36,400
So if you're ready,

109
00:03:36,400 --> 00:03:38,619
let's get started with our journey into physical security

110
00:03:38,619 --> 00:03:40,353
in this section of the course.