物理安全就是网络安全

1Physical Security is Cyber SecurityOoregon Cyber Resilience SummitOctober 2024Ryan FerranSenior Penetration Tester and Manager of CyberSecurity Assessment Services2Ryan FerranManager, CyberSecurity Assessment ServicesSenior penetration testerSeven years offensive securityTwelve years system administrationTechnical Penetration TestingPhysical Penetration TestingSocial EngineeringIn-person social engineeringPhone-basedEmail phishingrferran@bpm.comAlso known as:ryanf@bpmsec:~$ whoamihttps://www.linkedin.com/in/ryan-ferran/3ryanf@bpmsec:~$ whoamiRyan FerranOperational Technology Assessment TeamCertified SCADA Security ArchitectPower: distribution, transmission, generation on the BESWater TreatmentWaste WaterMunicipalitiesIndustrial Manufacturing4Contents What is physical security How does physical security relate to Cyber Security What are your publicly accessible areas and assetsPhysical vulnerabilities and exploits In-person social engineering Strategies and success