This talk explores many aspects of physical security, including why it is important, how physical security is assessed professionally, and some professional opinions on what comprises "good" physical security. Then, I will briefly touch on physical penetration testing and what usually comprises a physical penetration test. I will also relate a few fun war stories from some personal experiences while performing these kinds of tests.

Adam Sachsel graduated from UMBC in 2021 with a BS in computer science. Initially his goal was to become a software developer, until the UMBC Cyberdawgs recruited him and completely changed his career path to focus on security. After graduation Adam secured a job as a "Cyber Testing Associate" with RSM Consulting in Des Moines, Iowa. He was quickly assigned to the Social Engineering Team and now spends his days performing internal and external penetration tests, drafting phishing campaigns, and lying his way into secure areas around the U.S. He is currently on the path to achieve his Practical Network Penetration Tester (PNPT) certification and eventually join the RSM Red Team in more complex engagements. Email:adamsachsel@gmail.com.

Support for this event was provided in part by the National Science Foundation under SFS grant DGE-1753681.

The UMBC Cyber Defense Lab meets biweekly Fridays 12-1pm.  All meetings are open to the public.  Upcoming CDL meetings: Sept 23, TBA; Oct 7, TBA; Oct 21, Peter Peterson, Misconceptions in cybersecurity; Nov 4, Josiah Dykstra (DoD), Myths in cybersecurity; Nov 18, Russ Fink (APL), ARMR: autonomous resilience / machine recovery; Dec 2, Peter Peterson, Adversarial Thinking; January 2-6, 2023 (tentative): SFS/CySP Research Study.