Professional Windows Server 1002003 Security A Technical Reference [Electronic resources] نسخه متنی

Auditing Physical Security

All the best technical security defenses in the world may not work if an attacker can obtain physical access to computers or computing infrastructure. Physical security should be a major consideration when developing a computer security plan and should be audited. Although physical security is outside of the scope of this book, any discussion of security auditing would be incomplete without at least indicating the need to consider physical security. Specifically, when considering physical security for Windows Server 2003 systems, look for the following:

The use of smart cards or other physical devices that may have been implemented. Although using these devices may not prevent an attacker with physical access from compromising the computer (he might boot to another OS, for example), they can help. If a smart card is required for logon, it will be more difficult to attack than if only an account and password are necessary.

Removal of removable media drives, such as floppy and hard disk drives. This can thwart attacks that would boot to another OS and may also prevent data theft.

Lack of or disabling of other access ports, such as USB ports and firewire ports, that might be used for data theft.