{"id":262,"date":"2019-06-11T12:20:49","date_gmt":"2019-06-11T10:20:49","guid":{"rendered":"https:\/\/lars-hilse.de\/lhx18\/?p=262"},"modified":"2019-06-07T02:29:31","modified_gmt":"2019-06-07T00:29:31","slug":"visitors-by-appointment-only-even-tech-workers-maintenance-staff-cleaning-staff-etc","status":"publish","type":"post","link":"https:\/\/lars-hilse.de\/lhx18\/2019\/06\/visitors-by-appointment-only-even-tech-workers-maintenance-staff-cleaning-staff-etc\/","title":{"rendered":"Visitors by appointment only\u2026 even tech workers, maintenance staff, cleaning staff, etc"},"content":{"rendered":"
<\/div>\n
\"\"<\/figure>\n\n\n\n

Probably one of the most interesting incidents I have investigated was the theft of computers from a university.<\/p>\n\n\n\n

The perpetrator had done a good job scouting out the procedures of the organization, and through his reconnaissance put together a whole deal of information.<\/p>\n\n\n\n

He knew for instanceHe knew for instance that onHe knew for instance that on Fridays most of the staff will have left the establishment by 2 PM.<\/p>\n\n\n\n

Only assisting staff, and janitorial staff would be around.<\/p>\n\n\n\n

All of the senior staff, professors, IT staff were gone at that time.<\/p>\n\n\n\n

He entered the building, and presented apparently correct paperwork to the secretary.<\/p>\n\n\n\n

The paperwork was well forged, and presented the secretary with no reason for objection.<\/p>\n\n\n\n

She escorted him to the server room, where she left him unattended to finish up her paperwork before the weekend.<\/p>\n\n\n\n

Because she Even unlocked the room for him, it was easy to clear out the entire IT infrastructure of the University because he was unobserved for hours.<\/p>\n\n\n\n

The picture that presented later on to law-enforcement was one of a kind\u2026 Everything had been taken. Servers, switches, cables, server cases, racks, etc.<\/p>\n\n\n\n

I was later hired to check the systems for breaches, and whether the criminals had gained their intelligence about security measures by System infiltration.<\/p>\n\n\n\n

In my concluding report I found no evidence to underline that assumption.<\/p>\n\n\n\n

It does prove valuable point though. <\/p>\n\n\n\n

Access control to buildings is insanely important. So our logs about who visits; these must of course have some sort of valid identification as a foundation. Even then there is no absolute security unless the visitor is constantly monitored by an employee during their stay in the facilities.<\/p>\n\n\n\n

(Part of the ACRAC Project) <\/a>
<\/p>\n