SECURING OUR DATACENTERS

Size: px

Start display at page:

Download "SECURING OUR DATACENTERS"

Angel Matthews
5 years ago
Views:

1 SECURING OUR DATACENTERS Jeffrey Lam ACP, RCDD AXIS COMMUNICATIONS 17 Nov 2016, 4.30pm

2 SECURING OUR DATACENTERS Security is not a product nor a feature; it s an integration of culture, policies & systems There are no secure systems! You can only make systems more secure.

3 3 KEY THREATS & DEFENCES DISPOSSESS DISRUPT DISABLE TECHNICAL DEFENCE

4 Defence in Depth Medevial Castle defence - Castle within a castle - Layers of obstacles Deter opportunists Deny trespassers Delay intruders Detect perpetuators Defeat offender

5 Defence in Depth Castle Datacenter Moat Outer Wall Inner Wall Keep / Tower Perimeter Building Critical Spaces Strongbox

6 1. ARCHITECTURAL DEFENCE LAYERS BARRIERS Perimeter fencing Building Walls Computer / plant rooms IT / control cabinet ACCESS Perimeter Gates Building entrances Computer room entrances Cabinet doors CONNECTORS Facility grounds Mantraps Elevators Corridors

7 PERIMETER LAYER

8 Security-based operations BUILDING LAYER

9 CRITICAL SPACES LAYER

10 STRONGBOX LAYER

11 2. TECHNICAL DEFENCE INTRUDER DETECTION SOFTWARE ANALYTICS ACCESS CONTROL VIDEO SURVEILIANCE OTHERS PUBLIC ADDRESS VOICE COMMS

12 PERIMETER LOW LIGHT CAMERAS Image without Lighfinder technology Image with Lighfinder technology

13 PERIMETER - THERMAL CAMERAS Detect with thermal camera (AXIS Q1922) Visual camera (AXIS Q1755) Zoom & identify with visual camera (AXIS Q1755)

to capture the environment outside WDR Forsensic

14 Building Level varying light levels Overexposed trying to capture the environment indoors Underexposed trying to capture the environment outside WDR Forsensic Capture Looks slightly unreal, but more useful for surveillance

15 Computer Room : integrated with IIM/DCIM! Security-based operations Pre-event images Event Security-based operations Security-based operations Post-event images

16 ADVANCED COMPRESSION TECHNIQUES

17 STRONGBOX (RACK) LEVEL CAMERAS > Small form factor > Installed at eye level capture face > Integrated with audio & I/O > Integrated with DCIM / IIM > Single IP address for multiple cameras

18 INTRUSION DETECTION Camera Analytics Pressure Wall & floor sensors Infra-red Open Area Sensor Buried coil Electromagnetic

Aggression detection Smoke detection Gunshot Broken

19 Analytics Video Analytics Perimeter protection Facial recognition People counting Unauthorized access Aggression detection Smoke detection Gunshot Broken window Screeching car Voice aggression Voice key words Audio Analytics

IP PUBLIC ADDRESS SYSTEM Traditional analog speaker

All-in-one - Speaker audio cable Amplifier - Line

level audio cable Streaming box - Network cable

20 IP PUBLIC ADDRESS SYSTEM Traditional analog speaker solution Speaker Axis network speaker solution All-in-one - Speaker audio cable Amplifier - Line level audio cable Tone control / Equalizer - Line level audio cable Streaming box - Network cable Network switch - Network cable (Structured Cabling) Network PoE switch

21 ACCESS CONTROL > Identification What you Have What you Know Who your Are > 2 factor / 3 factor authentication

Vehicle entry with weighing scale Drone detection & disablement systems Drone

22 Other electronics systems Key Management Systems RFID Asset management systems Visitors pass management systems Mantrap with weighing scale /metal detector Vehicle entry with weighing scale Drone detection & disablement systems Drone based surveillance system Intruder response system fog, net, etc Etc. COPYRIGHT TRAKKER

23 IoT CENTRALISED CONTROL INTERCOM CAMERAS ILLUMINATOR MICROPHONE PIR SENSORS SPEAKERS Security-based operations DOOR CONTROLLER I/O CONTROLLER

24 How about Cybersecurity? Standard hardening stops majority of attacks Intuitive and userfriendly IT policies System maintenance process User education Embrace security culture The goal is to make attacks expensive rather than impossible.

25 Integrated surveiliance & dtection

26 3. OPERATIONAL DEFENCE Security Awareness Training, Tabletops & Drills Audits, feedback & Modifications Event post-mortem & Corrective actions Security Culture Event Response Use of disabled cards Perimeter breach Left baggage Tailgating Unplanned deliveries Unaccounted visitors Assets disposal Visitor / vendors access Maintenance / repair work Employees backgd checks Purch. & delivery new equip. Security-based operations Emgy access by authorities / utilities Security - based operations

27 THANK YOU To download AXIS Commmunciations Defending our datacenters white paper, please visit

28 Facebook LinkedIn YouTube Innovating for a smarter, safer world.

AXIS Camera Station. Efficient surveillance and more.

AXIS Camera Station. Efficient surveillance and more. AXIS Camera Station Efficient surveillance and more. 2 AXIS Camera Station Easy and efficient surveillance Stay safe and secure A solution using AXIS Camera Station is easy to use and maintain, which allows