>> Okay guys, in this section,
we'll talk about reducing
the attack surface. The idea
here is that some software like
operating systems can really be bloated and contain
a lot of applications and
services that may not be necessary.
But the more services and
applications you have running on a system,
the larger the system is,
and that also means it has a larger attack surface.
So if you can uninstall or
disable some of the unnecessary services,
you can reduce the attack surface and harden
the system. But it's more than just reducing
the amount of extra software or hardware.
Reducing the attack service also involves patching
and updating your systems
to make them a harder to attack.
Now before we talk about hardening our systems,
we also need to think about hardening our facilities.
Now, when it comes to where
your facility should be placed,
we want to think about somewhere
where there is natural surveillance.
You don't want to be at the end of
a driveway off the road, rather you'd
want to be somewhere where there is a lot of
traffic or in an area that is frequently observed.
Fences are helpful, but they should be
eight feet high in order to DETER an intruder.
There is no height that will totally
prevent a determined intruder,
but you can't DETER someone.
In many cases, we were just looking to
use layered defense to slow an attacker down.
Lighting is important,
it should be eight feet high and overlaps
there are no dark areas that are not lightened.
Door should have hinges that are internal to the door
and not in a place where an attacker can pop them open.
For your windows, you want
to have the strongest available,
which are polycarbonate or Lexan,
such windows are bulletproof.
Security guards and man- traps are
important to stop someone from trying to force
their way in or
piggy-backing or tailgating on another person who has
access.. We went to log the entry and
exit of all visitors so you can
keep track of all the people who have had access.
If you really want to tightly control visitor access,
one thing you can do is require
a drivers license in exchange for the visitor's badge.
This helps ensure that when people
are actually who they say they are,
and also that they will return them
visitor's badge when they leave.