Protecting Network Data

Transcription

1

2 Fiber Optic Network & Cabling Infrastructure Security Sensor System

3 Product Applications Physical Network Protection and Equipment Security Protecting the Physical Layer of the Network Protecting vital and sensitive information Downtime, tapping, accidental intrusion Alternative to Encryption (in select environments) Data Centers & Server Rooms Optical Fiber Cable Infrastructure Military and DOD PDS (Protected Distribution Systems) Classified Networks / SIPRNET

4 Certifications United States Air Force TEMPEST Certified Technical Authority Approval (CTTA) FD-208 sensor for PDS applications Headquarters Air Force Communications Agency Approved 21 March 2003 Air Force Manual Protected Distribution Systems (PDS) and NSTISSI 7003 Department of Air Force Approval for Priority Level 1 Facilities Approved 3 April 2003 SPAWAR Approval IA Pub U.S. Navy 31 October 2004

5 System Overview Alarm System with Headend Option Sensor Cable immune to EMI, RFI, and lightning Detection Zones up to 5 km Interoperability with Alarm Panels Highly Scalable Highly-configurable control software Local or alarm notification

6 System Components Specially configured Optical Fiber Cable & Connectors FD-208 sensor (Alarm Processor Unit) SMS 2000 Software (optional) Intelligent Field Panel (502 or 508 controller) (Headend) Central connection and control point for all the hardware. All system functions are controlled by this unit

7 How the Sensor Works Fiber optic sensing cable is glass. Inner conductor, called the core, conducts light (No Data)

8 If the fiber optic cable is disturbed, the pattern of conducted light changes. Sensitivity to motion, vibration, or pressure Protecting Network Data

9 The Alarm Processor Unit Allows direct or remote mounting of the electronics away from the fiber-optic sensing zone. Models include: Stand alone systems Rack mount systems

10 The system uses optical fiber as a sensing cable to detect the presence of an intruder. FD-208 R FD-208

11 Laser light from the APU transmits through the cable The system detects shifts in the return light pattern Max. 20 KM Max. 5 KM

12 Protected Distribution Systems (PDS) Wire or Fiber-Optic distribution system used to transmit un-encrypted classified NSI or military information through an area of lesser classification or control. U.S. Air Force Regulations U.S. Navy (via certifying authority) U.S. Army and U.S. Marines DOD Contractors; DHS

13 Benefits of Alarmed PDS Certified / meets PDS requirements Inexpensive Eliminates Need for Encryption (expensive, slow, key-based) Can be used on long runs Eliminates inspection requirement Immediate intrusion detection Configurable Parameters Eliminates Nuisance Alarms

14 Information Assurance Physical Security Addresses Layer One Network Vulnerabilities Structured Cabling and Data Centers Reliability Uptime Physical Intrusion (accidental or intentional) Physical Equipment and Wireless AP s

15 Threat OSI Model Security Trojans, Viruses, Worms, Spyware, Key Loggers Anti-Virus, Spyware detection and removal Unicode Vulnerabilities Patches TCP Session Hijacking, DoS attacks, Man in the Middle Authentication, SSL, SSH, IPSEC, Kerberos, strong passwords Port Scanning, NMAP Router Password buffer attack, IP Spoof MAC Spoof, ARP Cache Poisoning Firewalls, Scan Log d Software updates & patches, restrict console port access Physical Security (SecurLAN options), Static ARP cache Tapping, Cable Cuts, Cable Tamper, Backhoe, Accidental Intrusion SecurLAN, UPS Power Measures, Microwave Emission Analyzer Source: SANS Institute *

16 Example: Organization occupies floors 3, 4 and 9 Multiple Floors? SecurLAN installed in / on data conduit?

17 Multiple Buildings SecurLAN installed in / on data conduit

18 Advantages of Using Fiber Optic Sensors You can detect any unauthorized trenching, boring, core drilling or any other digging methods along your cable route.

19 You can detect any unauthorized intrusion at your MPOE/DEMARC, MDF, IDF or Network Operations Center.

20 The sensing cable can be deployed along a fence or buried under sod or gravel. Intruders compromising these barriers are detected Protecting Network Data

21 Response Options Optical cutoff switch Provides shutdown of all connections within the affected zone to deny access to sensitive data. AC cutoff switch An alternative method of network shutdown that cuts power to the router, hub, or PC denying access to sensitive data. alert Notify key personnel of intrusion attempts Auto dialer contact key personnel through pagers, cell phones, etc. You name it integrates with any system that accepts relay inputs (cameras, audible alarms, lights, etc.)

22 Product Summary Versatile Applications of the Base Technology IT Physical Security, Data Centers, PDS, Infrastructure Physical Layer LAN and MAN Protection Fiber-Optic Sensitivity Detects Movement, Pressure and Vibration Nuisance Alarm Discrimination Defined Zone Detection Complimentary to Existing Security Systems Customizable Response Options

23 For more information or to arrange a demonstration, please contact: Ken Rivera x 11