Security Tamper

Security Tamper

6 Steps to Securing Your Backup Media in Transport

Companies use significant resources to secure their production systems. The security of backup elements of the same infrastructure, especially the backup files are overlooked. This lack of security can be an excellent opportunity for an attacker.

Example scenario:
One of Shortinfosec Democorp branch office Domain Controllers has failed. A support expert is invited to assist, and he suggests to install a new server and restore the DC from system state backup of the failed one, thus retaining the SID of the old DC and other special configurations that have been implemented. The backup is kept at head office, and is sent on a CD via courier.
The CD is received, restored to the new server, and everything is good as new.

Two days later, a hacker attacks the Shortinfosec Democorp. The investigation concludes that the attacker used a domain user name and password to enter the computer system. The investigation concludes that the only possible breach of security was during the transport of the System State CD via courier.

Analysis:
The attacker has infiltrated the courier company used by Shortinfosec Democorp, and paid the courier to make a copy of all CD-s that are transited for Democorp. This can be performed even easier if the CD-s are sent via public mail, where a large number of personnel have access to sent material.
From the copy of the System State, the attacker recreated multiple clones of the domain controller in a VMware lab environment, and performed the following attacks in parallel:

1. Scanned the dumped clone for vulnerable services.
2. Performed enumeration of the domain users contained on the domain controller.
3. Performed brute force attack of the domain users contained on the domain controller. Any lockout was bypassed by simply restoring a copy of the clone and continuing with the attack
4. Performed systematic social engineering attack on targeted domain users to contained on the domain controller.

Conclusions and recommendations:
A good attacker is the one you have to be weary most about. Such an attacker will use any method to collect information, including media theft.

1. Any backup media must therefore adhere to the following recommendations:
2. All individual media containers with backup media should be sealed with a tamper evident unique label (a tamper evident bar code label with non-repeating serial number)
3. All such media must be logged, with dates of creation and tamper evidence protection label code. The log must be kept in two copies, one accompanying the tape and one kept by a person of authority which has no direct access to media containing backup (internal auditor, security officer).
4. All media containing information (erased and containing backup) must be kept in a locked enclosure with controlled access.
5. If backup is kept on a system (file server), the system must be configured for FULL AUDIT audit on access of all files. Audit logs must be regularly reviewed by a person of authority which has no direct access to media containing backup (internal auditor, security officer).
6. When the need arises to transfer media to another location, all transport methods must be treated as hostile. The media containing backup should be encrypted, and decryption keys should be transported by different channel. Also, all media must be protected by tamper evident labels with non-repeatable serial numbers, or placed in a tamper evident envelope with non-repeatable serial numbers.

About the Author

Spirovski Bozidar, CISSP, MCSA

Spirovski Bozidar is an ICT and security expert. Mr. Spirovski has worked in information management and security since 1999 His professional experience includes from Head of Systems and Security of an ISP, and Senior Solution Designer within an Incumbent Telco Opator. Bozidar currenty holds the position of a Chief Information Security Officer for bank, member of a large multinational group.
He has been involved as a guest speaker in a multitude of international conferences on information systems in CEE, covering the subjects of Personal Data protection and EU regulations, Risk Analysis and Business Continuity and Reliable Data hosting.

He is the author of the ShortInfosec Portal (http://www.shortinfosec.net)

Tamper-Evident Security Tape $8.2 Special print design on this packing tape shows tampering. Tamper evident stripes cannot be realigned once broken 2.2 mil polypropylene 2" x 55 feet

Tamper $10.49 Tamper

Axis 1 Megapixel Indoor Dome Security Camera $899.99 The Axis P3344 fixed dome network camera delivers clear video images in daylight and dark nighttime conditions. The camera is easy to install and features remote focus and zoom so users can adjust focus and viewing angle at their own convenience rather than at the camera position.With 1 Megapixel resolution, this dome camera delivers high-quality HDTV video footage for detailed monitoring. The camera's wide dynamic range and day/night functionality make it suitable for continuous around-the-clock surveillance in challenging lighting conditions.To optimize network bandwidth and storage, the camera offers multiple H.264 streams, as well as Motion JPEG streams, simultaneously with adjustable frame rates. This allows users to individually optimize video streams based and quality needs and bandwidth constraints.The Axis P3344 network camera features a tamper-resistant casing and is specifically designed for indoor applications requiring discreet surveillance. Its compact design and sturdy casing makes the camera well-suited for use in a variety of locations, including retail stores, banks, and airports.

3S 2.0 Megapixel IP Cube Security Camera $219.99 This 2.0 Megapixel IP cube camera from 3S combines the high-resolution video and the smart features of IP with an embedded microphone and speaker, effectively making a video and intercom solution in one. This powerful solution for secured entryways or corrections facilities.This camera includes video processing features to improve the quality of your video and the performance of your camera:3D noise reduction reduces the static that is common with video signals.Blind detection is a tamper notification. It sends an alert of the viewing angle of the cameras changes more than 5%, or if the viewing area has been blocked.Privacy masking allows you to black out areas of the video. It's commonly used in areas where private codes and passwords are being entered. For example, the owner may want the general manager to be able to look at the video of the office, but not see what the owner's codes or passwords are as he types or enters the company safe.Comes with bracket, mounting hardware, quick-start guide, application disk with full manual and software, 2-year warranty and 30-day money-back guarantee.

Normally Open Tamper Switch $1.71 This tamper switch can be used with any security system with normally closed circuits, and its small size makes it easy to hide and install. Type: Security & Motion

Tamper-Proof Nuts and Bolts $30.7 Reduce sign theft and enhance security with Tamper-Proof Nuts and Bolts. Cone-shaped aluminum nuts and steel bolts resist tampering with a standard wrench A special tool tightens and releases tamper-proof nuts with ease

3S 2.0 Megapixel Mini IP Dome Security Camera $269.99 This 2.0 Megapixel mini dome camera from 3S includes video processing features to improve the quality of your video and the performance of your camera:3D noise reduction reduces the static that is common with video signals.Blind detection is a tamper notification. It sends an alert of the viewing angle of the cameras changes more than 5%, or if the viewing area has been blocked.Privacy masking allows you to black out areas of the video. It's commonly used in areas where private codes and passwords are being entered. For example, the owner may want the general manager to be able to look at the video of the office, but not see what the owner's codes or passwords are as he types or enters the company safe.Comes with mounting hardware, quick-start guide, application disk with full manual and software, 2-year warranty and 30-day money-back guarantee

Sony Network 720p IR HD Bullet Security Camera $1748 This outdoor-ready, wide dynamic range camera is designed with built-in infrared (IR) illuminators. As a dual-stream network camera, it supports H.264, MPEG-4, and JPEG compression formats, and delivers excellent picture quality in HD 720p resolution at 30 fps. The camera features the Exmor CMOS image sensor, which is designed for surveillance, and View-DR image-enhancement technology for capturing images under challenging lighting conditions.Key features include:Superior 720p HD picture quality, supporting h.264 at 30 fps.View-DR wide dynamic range technology captures objects clearly and adaptively even under very severe backlight or highlight conditions.Visibility Enhancer optimizes the brightness and color reproduction of an image dynamically on a pixel-by-pixel basis while continuously adapting to the scene, within the given dynamic range.Built-in IR (Infrared) illuminators assist capturing objects in the dark, even at 0 lux, up to 49 feet (15 m) away.IP66-rated waterproof and dust-tight casing for outdoor surveillance, or indoor where water ingress may pose an issue.Easy Focus / Easy Zoom functions for easy installation.DEPA Advanced - intelligent video and audio analytics, trigger an alarm based on user-defined rules, intelligent motion detection, tamper alarm and advanced audio detection.Equipped with CompactFlash slot for on-board recording and supports wireless operation with the optional SNCA-CFW5 802.11g card.Optical Day/Night function switches to Day or Night mode depending on the light level.XDNR (eXcellent Dynamic Noise Reduction) technology for clear images without motion blur under low illumination.Powered by either AC 24V, DC 12V, or PoE (Power over Ethernet) for easy installation.Equipped with a built-in heater for continued camera operation in cold weather: -22°F to +122°F (–0° to +50°).Equipped with a BNC connector and a phono jack to instantly monitor the video while installing the camera.ONVIF (Open Network Video Interface Forum) software that ensures greater interoperability and more flexibility in building multiple-vendor systems.

Tamper Proof Shipping Tape $75.79 Tamper proof shipping tape adds security to shipments. Tamper proof security tape is adhesive backed PVC tape that cannot be removed without evidence of intrusion. Applies easily with your standard shipping tape dispenser. When removed the word OPENED appears on both tape and carton. Tamper evident tape is red and comes on a 180 ft. roll.

Tamper-Evident Tape $75.79 Tamper-evident tapes add security to shipments. 2"w x 60 yd. tamper-evident tape cannot be removed without evidence of intrusion.Applies easily with your standard tape dispenser (no need to moisten).When removed, the word "opened" appears on both tape and surface and cannot be reapplied.

Adhesive Tamper Indicating Security Asset Seals $527.8 One label for both security and tracking. Ideal for use on shipping cartons, sensitive equipment, restricted files, vehicles, lockers, containers, aircraft doors & hatches, etc Visual tamper-evidence "Void/Open" security message appears when label is lifted; prevents reuse of label Labels are preprinted with "Security Seal" and consecutive numbering or Code 39 bar code symbology with human readable number (factory chooses starting number for both styles) Seals with consecutive numbering (no bar code) supplied with write-on area for your variable information Supplied on a roll with perforated liner for easy dispensing Choose from 2 adhesives: Non-residue (Blue seals) - Leaves no surface residue when removed; only the seal indicates evidence of tampering to prevent reuse, surface is unaffected Residue (Red seals) - Displays evidence of tampering on both seal and surface; aggressive adhesive suitable for use on most surfaces yet residue left behind is easily removed

Tamper Resistant Label Tape $38 Tamper evident security tape ensures safety and prevents tampering. Never wonder if your packages have been opened or tampered with again Once a package is sealed with the tamper evident tape, opening it causes the tape to break The broken package tape is an obvious and a definitive sign that the seal has been tampered with The words "TAMPER RESISTANT" appear every inch on this roll of acetate labels Choose from 3 sizes to suit your packaging needs

Sony Network IP 1.3 Megapixel 49 ft IR Mini Dome Security Camera $1748 This vandal-resistant, wide dynamic range camera is designed with built-in infrared (IR) illuminators. As a dual-stream network camera, it supports H.264, MPEG-4, and JPEG compression formats, and delivers excellent picture quality in HD 720p resolution at 30 frames per second (fps).Incorporating the new Exmor™ CMOS image sensor from Sony, which is specially designed for surveillance applications, this rugged camera features state-of-the-art image-enhancement technology, View-DR™, which delivers an extremely wide dynamic range. The SNC-DH180 also features an IR illuminators to deliver quality images even in absolute darkness (0 lx)* 1. Along with a host of superb features such as DEPA™ Advanced, PoE, a built-in heater, and the Easy Focus/Easy Zoom functions, the SNC-DH180 Mini Dome Network Camera is ideal for the most demanding surveillance applications.Excellent picture quality in HD 720p resolution, supporting H.264 at 30 fps1.3 Megapixel (1280 x 1024) maximum resolutionThe Exmor CMOS sensor delivers high image quality and high sensitivity for surveillanceClearly captures objects in the dark up to 49 feet (15 m) away with IR illuminators, which allow the camera to operate in 0 lx lighting conditions *1 (Images 1)Wide dynamic range achieved by the innovative View-DR (Visibility enhanced wide Dynamic Range) technology (Images 2) s Full-capture Wide-D technology – all of the electrons converted from the captured light are fully used s High-speed Exmor CMOS sensor s Visibility enhancer technologyThe Visibility Enhancer optimizes contrast and makes the subject more visible, even in severe backlight or shadow conditionsXDNR™ (eXcellent Dynamic Noise Reduction) technology for clear images without motion blur under low illumination (Images 3)Easy Focus / Easy Zoom functions for easy installationDEPA Advanced Intelligent Video and Audio Analytics trigger an alarm, based on user-defined rules s Intelligent Motion Detection s Tamper AlarmThree codecs (H.264, MPEG-4, JPEG) with dual streaming capabilityPower over Ethernet (PoE) capabilityBuilt-in heater for use in cold • IP66-rated • ONVIF™ software (Open Network Video Interface Forum)

3S 2.0 Megapixel 82 Ft IR Network IP Bullet Security Camera $549.99 No need to add on IR illuminators or other forms of external lighting - this 2.0 Megapixel outdoor IP bullet camera from 3S includes a built-in IR array, giving you 82' of visibility in complete darkness. The adjustable varifocal 3.3 mm to 12 mm lens lets you adjust to the exact shot you need. The camera is weatherproof rated to IP68 for outdoor use.Advanced features include digital I/O for connection to external sensors and alarms, making it possible for you to be notified of events like door opening or motion detection. Combined with the two-way audio support, you have a powerful solution for secured entryways or corrections facilities.The dual codec gives you the choice of either H.264 or MJPEG compression. H.264 reduces file size without eroding the quality of high-resolution video.This camera includes the following video processing features to improve video quality and camera performance:3D Noise Reduction (3D-DNR) is an enhancement of traditional DNR technology. 3D DNR incorporates frame-to-frame noise reduction with spatial noise reduction. Spatial noise reduction compares a pixel with its neighboring pixels to detect and remove unwanted noise found within the frame. It processes the entire image to remove digital artifacts and graininess to enhance image clarity and sharpness.Motion detection enables the camera to be activated when movement is detected within the area under surveillance. Motion detection can be programmed to trigger other events, such as recording, high-resolution recording, and still image capture.Blind detection is a type of tamper notification. It sends an alert if the viewing angle of the camera changes more than 5%, or if the viewing area has been blocked.Privacy masking allows you to black out parts of the video. It is commonly used in areas where private codes and passwords are being entered, such as electronically secured entryways or safes.The PoE (Power over Ethernet) feature allows you to run power to your camera through your Ethernet cable, saving you time and money during installation.

Quality Park Tamper-indicating Envelope $42.99 0% 100 / Box 13" Width x 10" Length 44420 Envelopes feature a tamper-indicating panel to offer added security for important documents. If the envelope is unsealed, the word "OPENED" appears in red on the flap and cannot be repaired to hide evidence of tampering. Kraft No Quality Park Quality Park Products Security Envelope Tamper Evident Tamper-indicating Envelope www.qualitypark.com

9 PCS Torx Wrench Tools Set Tamper Proof Security Type $17.99 Description:These Torx Wrench Tools are made of hardened chrome vanadium steel for greater strength.Each Torx Wrench has a small hole in one end for use with security type fasteners.Torx Wrench Set includes the following sizes: T10, T15, T20, T25, T27, T30, T40, T45, T50.These Tamper Torx Wrench can be used to repair cell phones, radios, clocks and other small appliances!Size of the set: ~12.8(L) x 7(W) x 2.4(D)cmWeight: 273g

Duraguard Tamper Evident Tags $60.4 Ideal for security applications that require evidence of tampering. All the features of our best selling DuraGuard® Tags with a specially formulated adhesive that leaves a bright silver void pattern when removal is attempted - provides instant evidence of tampering Tags cannot be reapplied once removed Choose from a variety of sizes, colors, numbering and bar code options Endless layouts available - simply send us your design and we will produce high-quality tags to your exact specifications