Page 34 - Security Today, January/February 2019

Cover Story
infrastructure, that edge is network devices deployed on our road- ways and highways. One need only look left or right at their next traffic intersection stop to see that silver aluminum cabinet with the ubiquitous “Dial 511” blue sticker brightly affixed. Inside these cabi- nets are intelligent devices and connectivity that if left unprotected, leaves our country’s infrastructure and citizens exposed for critical safety risks.
Securing access to our infrastructure and managing key/card hold- ers is critical as we are now exposed to an entire gamut of risk from seemingly harmless vandalism to more malicious physical and cyber- attacks. Used to store and protect complex equipment that connects and controls traffic signals, vehicles, communications, digital road sig- nage and more, traffic cabinets are critical for road and highway safety and most with access to a live network...and all with little to no secure access or security monitoring. This is our starting point.
Despite the fact that physical access to traffic infrastructure can have an immediate and widespread impact, the vast majority of cabi- nets are secured with a simple unsecure mechanical key. Hundreds of thousands of key-holders currently have access to a piece of the country’s critical infrastructure. This presents a serious threat as we continue to rely more on technology to operate and control our ve- hicles, signal and communications systems.
Securing the transportation infrastructure and ITS starts with elim- inating the use of uncontrolled and unaccountable mechanical keys.
Collaborative Partnering
Through collaboration and education, a community is being formed to impart knowledge and take action securing transportation’s criti- cal infrastructure. A small circle of established industry-leading solu- tions providers have been brought in to move the technology devel- opment effort forward.
Door opening solutions for the physical security industry and typical door security hardware technology are now being developed specifically for transportation and ITS solutions as well.
“Offline” Access Control
Intelligent Keys and eCylinder Traffic Cabinet Locks offer a significant increase in security over the common #2 mechanical lock and key. eCy- linder Traffic Cabinet Locks can be installed quickly and easily, provid- ing an affordable option to upgrade the security of traffic cabinets.
This solution includes intelligent keys and cylinders, both as- signable to specific DOT personnel and specific cabinets, bringing a higher level of access control and audit capability for those secur- ing the ITS “edge”. Unlike the obsolete #2 mechanical key, intelligent keys have designated access rights and schedules by user and can be expired or revoked to meet daily security needs. Software applica- tions (either on premises or in the Cloud) enable DOT management to control who goes where (and when), and then evaluate their op- erations through highly specialized software analytics. This is what is termed an “offline” solution, ideal when live monitoring, remote access, and door security alarm features are not essential.
“Online” Access Control
Real-time online ITS edge protection applies physical security tech-
nology to create a solution that allows DOT agencies to actively mon- itor and control cabinet doors at any location on the ITS infrastruc- ture network. Initial versions of this solution are now being deployed with industry-leading innovative access control technologies.
This true “online” access control provides critical high-level secu- rity by enabling real-time monitoring and remote lock or unlock ca- pability at the traffic cabinet, leveraging pre-existing cabinet network connections. The industry’s first “online” solution for traffic and ITS cabinets is now available. This active traffic lock system adds security intelligence to existing ITS cabinets and provides full management and control capabilities of the traffic infrastructure. Combining inno- vation from a group of global leading security solution providers, as- sets are protected using secure encrypted card readers, vandal proof heavy duty locks and intelligent controllers connected to high-end systems integrated into the ITS infrastructure, providing security and access control with multiple credential technologies including secure encrypted card, PIN or mobile access (BLE and NFC).
Best of Both Technologies?
Can Intelligent Keys and eCylinders be used in conjunction with on- line powered card readers and locks? Leading solution providers say yes, utilizing a combination of active “online” access control with Intel- ligent Key override provides the safest, most secure solution possible.
With this combination even in the event of system or power failure, access to the cabinet is always allowed but only to authorized person- nel, controlled and recorded to maintain security and audit history.
Infrastructure Security Management
So the question is: do you know who has access to your ITS devices and traffic cabinets? Physical access to traffic infrastructure exposes agencies to both physical and cyber related attacks. With connected vehicle technology and more IoT connected devices than ever be- fore, legal and liability issues are a reality for agencies operating these assets. Entry into an ITS cabinet must be controlled, managed and monitored to maintain safety and security. Now more robust solu- tions exist in both “offline” and “online” options.
Management of critical infrastructure and access control must be handled efficiently and securely. Centrally managed software com- bining access control with video verification, asset management, and work flow operations allows increased awareness and response times for transportation agency operations. Knowledge of who is inside your cabinets or how long a contractor was onsite is now available through one single pane of glass, creating not only a secure infra- structure but operational efficiencies as well. Agencies should have the ability to remotely lock down every cabinet on the network, grant permissions or open a cabinet with a stroke of a key if needed.
The time is now to be taking steps to ensure the security of our critical infrastructure systems. Cyber security attacks are a real threat for transportation infrastructure as we depend on the digital world more with every passing day. It is time to take an active approach to securing our ITS devices. Secure the edge. Secure your traffic.
S. Guerry Bruner is an integration solutions specialist at ASSA ABLOY Door Security Solutions.
GS12
GOVERNMENT SECURITY JANUARY/FEBRUARY 2019