CompTIA Security_ Deluxe Study Guide_ SY0-201 - Emmett Dulaney [148]
Scanning the Environment
The environment in which your business operates is bigger than the mere physical facility that houses your computers and employees. It also includes wireless cells, physical locations, shielding, and fire suppression. The following sections discuss these four areas to help you prepare for the exam.
Wireless Cells
The advent of wireless technology has created a wealth of solutions and problems for security professionals. The ability to use small, low-powered devices, such as cell phones, makes this technology attractive for mobile workers. Manufacturers now make smart phones that can also act as PDAs. Adapters are available for most PC systems that allow them connection to cell phones. New cell sites are being added internationally, and the coverage area of cell phones is increasing exponentially.
The technology is based upon small, low-powered transmitters located strategically throughout a coverage area. A cell provider is given approximately 800 separate frequencies to use in a coverage area. The frequencies are then broken down into roughly 56 channels in a single cell. Figure 6.6 shows this coverage scheme.
FIGURE 6.6 A cell system in a metropolitan area
The individual cells have a high level of computer intelligence, and they hand off conversations to each other automatically. Cell phones in the United States operate in the 824MHz to 894MHz range. The Federal Communications Commission (FCC) requires police scanners to bypass these frequencies in the United States; most other countries don’t require this frequency blocking in communications equipment.
For additional information on frequencies, beyond what you need to know for the exam, visit http://electronics.howstuffworks.com/cell-phone10.htm.
It’s a federal crime to monitor or eavesdrop on cell phone frequencies, though there are exceptions, as with the Patriot Act.
Cell phones use analog as well as digital transmission capabilities. The analog cell systems allow approximately 60 simultaneous conversations to occur in a single cell. Digital technology expands that to about 180 simultaneous conversations. New applications, which will allow for cell-based banking and other transactions, are being added to cell technology.
Global System for Mobile Communications (GSM), the newest standard for cell systems, offers encryption. GSM works in conjunction with a Subscriber Identification Module (SIM), allowing users to change phones. The SIM is a removable card that can be moved from one phone to another. Unfortunately, U.S. and European cell standards aren’t interchangeable, although many manufacturers are now selling dual-mode phones.
Many people believe that cell phones are untraceable and that you can’t determine the location of a cellular user. This isn’t the case. When a cell phone is turned on, it immediately identifies itself to the cell that is closest to it. The cell systems can triangulate a cell user to within a few feet. This can be done even if the phone isn’t in use but is merely turned on. The point of origin can be determined in only a few moments because the process is largely computerized.
Real World Scenario
Securing Your Wireless Devices
You’ve become increasingly concerned about secure access to your network using wireless devices. Many managers and other employees use wireless personal digital assistants (PDAs) to communicate when they’re away from the office. What can you do to secure these devices?
You may want to implement a wireless security protocol (such as Wireless Transport Layer Security [WTLS] or Elliptic Curve Cryptography [ECC]) in these devices and in your network. Doing so would allow communications to occur between wireless users and your network.
Physical Location
The location of your computer facility is critical to its security. Computer facilities must be placed in a location that is physically possible to secure. Additionally, the location must have the proper capabilities to manage temperature,