In my previous article and in this one I wrote only about the attacks from the virtual world. Mostly the same is if we look on other articles out there in the internet.

However, what helps us to have the best online defence if our physical Door is open. Physical access to the environment are different things, attackers can simply place a USB stick close to a company entrance door and hope that someone who “finds” it will take it into his computer to check what is on it.

Another thing is the physical access to the Building, if there is no physical security concept that prevent access of third-party persons the risk is very high to get in troubles. In this case attackers can try to get confidential information about the company, trying to plug in his own device to the LAN (if there is no MAC address filtering) and can start with attacks from inside.

If an attacker is inside the building, he can try to get to a computer, which is with an unlocked screen. Employees go quickly to the printer and they don’t lock their screens, on the way to the printer they start to talk to a colleagues and their screens are unlocked for 5 – 10 minutes. Enough time for an attacker to do his things.

The same problem I see time by time in shops. If you go to a Multi Media shop where you cannot prevent third party people to enter the building, because they are the customers, it is very important that the computers from the store working employees have security features like USB protection and that the store workers lock the screens when they are not using them.