Slashdot Mirror
Intrusion Detection For Your PC Case
Anonymous Coward writes "Ryan du Bois, from genbukan security (aka red0x), has created a chassis intrusion detection system for your computer box: the actual physical case. He also wrote a paper describing three separate implementations of this CIDS system: Contacts, Pressure switchs, and a PLA (programmable microchip). Included in his paper are complete designs for the first two and a promise for the last to come soon. Definitely worth a read. The paper is available in many formats including
OpenOffice 1.0,
HTML ,
TEXT
and a Tarball of them all. You can also obtain the
signatures as well as his Automated Security Tools Project, of which this is a member."
Pretty much all standard business desktops have intrusion detection devices, as well as bios hooks to inform higher level software apps that it has been tripped. Most server cases have this as well- a whole slew of my compaq racks here have them, and they tie into our management system. Mind you, they lock as well, so I'm not as worried- they have solenoids! *THUNK*
I can't imagine someone cobbling together something that has existed forever is news...
EOM
Compaq has had something like this for years. Not only that, they have an internal case lock which can be activated/deactivated remotely, or in the password protected bios.
A special tool from compaq is required to defeat the lock...or a drill. But anyway, it can keep track of when the case is opened I believe.
I have seen, but never used the feature, so I don't know the specifics.
-Pete
Soccer Goal Plans
All you need is tamper-evident tape.
Best Windows Freeware
I have moderation points, but it won't let me moderate the story itself as "pointless" or "redundant"
It's really too bad when the people running the site know less than the people reading it.
Twoflower
--
Twoflower
is that we need lasers set up in an inefficient pattern surrounding the box itself.
I am the lord of the pun. Dance Knave!
As interesting as this is, I'd be more worried about someone actually stealing the machine than opening it up for components. Even in a office environment, who is going to check each machine to make sure the employee using it didn't crack it open to swipe some RAM?
Why not just use a chain to the desk which locks the case shut? Then you're safe in both cases.
I used to work for a defense contractor where many of our computers were used to process classified information. Besides controlling access to the room in which the computers were located, stickers were placed over all the access points to the internals of the machine. The stickers were signed and dated by the security officer when they were placed and if one was broken, the computer had to be carefullly inspected before it would be returned to operation. Needless to say, employees were enouraged to report wear on stickers before they were completely broken, to avoid having to throughly inspect the innards of the device for bugs.
-- Adam
Howsabout a good old fashioned thieves knot?
this seems kinda funny. First 'hacker' makes case mods so you can see al of his frilly internals. then he puts on a system so you cannot touch or have access to them. this is strangely reminiscent of the lingerie / chastity belt scenerio, see... no touch. see... no touch.
I want 2D games back.
Gracie, the gray tabby cat sleeps atop my PC case. If her bed is disturbed... and I do mean in any way... she cries for days on end. She can't be consoled. I have no choice but to hunt down the man what tried to jack my HDD and present his head to the cat like she does when she brings me mice.
The next Slashdot story will be ready soon, but subscribers can beat the rush and slashdot the links early!
I remember reading about systems in old issues of PC Magazine or such where, if the case was opened incorrectly, something inside would explode and cover everything inside with paint, thus making the computer parts un-sellable on the reller's market. The crook would leave your box behind and you could still get at your HDD to recover your data.
Leave a fake grenade, with the pin pulled and the spoon held down by the outside of the case in the computer.
Identify intrusion by the stain on the floor.
For bonus points, replace the fake grenade with a real one.
www.eFax.com are spammers
I like the system that Apple has put into their G4 Towers. There's a spring-loaded clip with a hole in it that pulls out of the back of the case. You can slip a cable/padlock/whatever through this which prevents the clip from springing back into the case.
When the clip is out, the EZ-flip-down-door on the side of the case is locked, preventing unnoticable intrusion.
So what we have here is some fourteen year old with his own "security" organization, a metric buttload of super glue and an utter lack of clue who writes a frankly useless article so that he can pretend he's important whilst slinging around big acronyms like "PLA" and "VHDL" when the tools they represent are useless to the task at hand. In other words, a snake-oil salesman.
-jhp, smacking down dim-bulbs everywhere
/. -- the Free Republic of technology.
I suggest you search through the archives of "Ask Slashdot." You'll find many interesting stories where it is clear that if the poster's identity was given away, they would be in trouble with their boss/clients.
Technology Sectors that are Hot or Heating Up Now?
Is it Wrong to Accept an Employment Counter-Offer?
Technology for Undercover Journalists?
Convincing Management of Network Security Issues?
Headhunting Laws?
And more ...
If you can't tell from all the other posts, this has been implemented for a great number of years on nearly all business-grade desktops, usually accompanied by a provision for a physical lock.
If this kid actually gets someone to buy into this and pay him to license his "software", I've gotta give him at least a little respect. At least he's not the one paying for it.
--Ribald
"Sounds interesting, but incredibly impractical."
/. case-modder...
Ah! You have issued the rallying cry of the
"It sounds interesting yet totally impractical! To arms, my brothers! Let us mod this case!"
graspee
So, beyond the dubious importance of this "design" - which begins with setting up copper contacts on the case and moving on to pressure switches - he can't give us any results because he doesn't have a utility to check the register.
That's classic.
Two bits says this made it to the front page because he mentions he's running linux on his "CIDS."
IP is just rude.
Is there any torture so subl
I work at a large public university and I admin an unmonitored lab. This is what we came up with.
We used a home security alarm system modified to connect to the computers. We mounted a switch inside the case that would open when the case was opened. We put the correct resistor in series with the switch (home security alarms don't just measure continuity, the also measure resistance) and connected it to a RJ45 jack on a blank slot cover. We mounted a plate to the monitors either by replacing a screw with a security screw kit (you can't remove the screw without removing the cable run through it) or using industrial super glue. Loop the security alarm cable through the monitor plate and the lock hole on the back of most computers, connect it the RJ45 jack and arm the alarm. If someone disconnects the cable or opens the case, a 125db alarm sounds in the room and an automatic call is placed to the campus police.
I have great faith in fools - self confidence my friends call it. - Edgar Allan Poe