SE Radio 640: Jonathan Horvath on Physical Security

Jonathan Horvath of Z-bit discusses physical
access control systems (PACS) with host Jeremy Jung. They start
with an overview of PACS components and discuss the proprietary
nature of the industry, the slow pace of migration to open
standards, and why Windows is commonly used. Jonathan describes
the security implications of moving from isolated networks to the
cloud, as well as credential vulnerabilities, encryption using
symmetric keys versus asymmetric keys, and the risks related to
cloning credentials. They also consider several standards,
including moving from Wiegand to the Open Supervised Device
Protocol (OSDP), as well as the Public Key Open Credential (PKOC)
standard, and the open source OSDP implementation that Jonathan
authored.


Brought to you by IEEE Computer Society and IEEE
Software magazine.