15
Life Safety Networks A Parallel Network Approach Matthew K. Arthur, CISSP Director – Enterprise Networks Washington University in St. Louis ACUHO-I, 30 September 2007

Life Safety Networks A Parallel Network Approach Matthew K. Arthur, CISSP Director – Enterprise Networks Washington University in St. Louis ACUHO-I, 30

Embed Size (px)

Citation preview

Page 1: Life Safety Networks A Parallel Network Approach Matthew K. Arthur, CISSP Director – Enterprise Networks Washington University in St. Louis ACUHO-I, 30

Life Safety NetworksA Parallel Network Approach

Matthew K. Arthur, CISSPDirector – Enterprise NetworksWashington University in St. LouisACUHO-I, 30 September 2007

Page 2: Life Safety Networks A Parallel Network Approach Matthew K. Arthur, CISSP Director – Enterprise Networks Washington University in St. Louis ACUHO-I, 30

AGENDA

BackgroundRequirementsPlanningImplementationCurrent StatusFuturesQuestions

Page 3: Life Safety Networks A Parallel Network Approach Matthew K. Arthur, CISSP Director – Enterprise Networks Washington University in St. Louis ACUHO-I, 30

BACKGROUND

WU Network Setup - A Federated ModelCore Network, Departmental Control

Facilities - Pain and FrustrationLayer 2 requirements, Departmental Control

Spring 07 TragedyCCTV Requirement for Residence Halls

Page 4: Life Safety Networks A Parallel Network Approach Matthew K. Arthur, CISSP Director – Enterprise Networks Washington University in St. Louis ACUHO-I, 30

REQUIREMENTS

General Principles of the WU CCTV Policy Protection of individuals, including students, faculty, staff,

and visitors Protection of University owned and/or operated property,

and buildings, including building perimeters, entrances and exits, lobbies and corridors, …

Verification of alarms and access control systems; Investigation of criminal activity and serious disciplinary

activity, such as, for example sabotage of research projects; and

Protecting the University interest against negligence liability

Page 5: Life Safety Networks A Parallel Network Approach Matthew K. Arthur, CISSP Director – Enterprise Networks Washington University in St. Louis ACUHO-I, 30

REQUIREMENTS

Camera Viewing Criteria As a reaction to known threats and incidents (theft,

assault, vandalism, sabotage, etc.) Coverage of residential housing and parking areas. Coverage of emergency audio assistance stations

located on University property Coverage of access control devices on University

property Coverage of general property & assets Proactive coverage for heightened security needs

(events, construction, ralies, etc.)

Page 6: Life Safety Networks A Parallel Network Approach Matthew K. Arthur, CISSP Director – Enterprise Networks Washington University in St. Louis ACUHO-I, 30

REQUIREMENTS

IT Requirements Latency, Jitter, Packet Loss, Network Availability, Mean to

Repair Network Vulnerability:

A disruption to security surveillance information represents another level of concern for physical security professionals. If the network can be proven to be reliable and secure, the technology would be embraced.

Privacy and Security Sensitive Information (SSI): A key advantage to an IP based CCTV system is the availability of

live and archived video to system stakeholders. Network software and hardware design would need to ensure that video could be viewed, but not saved or stored under any circumstances.

Page 7: Life Safety Networks A Parallel Network Approach Matthew K. Arthur, CISSP Director – Enterprise Networks Washington University in St. Louis ACUHO-I, 30

REQUIREMENTS

Must Be UP and accessible ALL the timeStudent Network Can’t Be in Position to

OverwhelmMust Be Able to Provide Evidence Quality

VideoPrivate, Secure, Private, Secure, Private,

Secure

Page 8: Life Safety Networks A Parallel Network Approach Matthew K. Arthur, CISSP Director – Enterprise Networks Washington University in St. Louis ACUHO-I, 30

PLANNING

CCTV Policy + Chancellor’s Committee on CCTV + Spring 07 Tragedy = Meetings & Planning

CCTV + Facilities Hopes and Dream = Parallel, Private, Secure Network

AVC Facilities and AVC IS&T level meetings

Budget for Residential Implamentation

Page 9: Life Safety Networks A Parallel Network Approach Matthew K. Arthur, CISSP Director – Enterprise Networks Washington University in St. Louis ACUHO-I, 30

IMPLEMENTATION

POE Building Switches => Fiber Pick-up Switches => Core Router

Establish Fiber RoutesConfigure Building Switches

Private Address SpaceCCTV, Monitoring, Access Control, &

Laundry/Vending…

Page 10: Life Safety Networks A Parallel Network Approach Matthew K. Arthur, CISSP Director – Enterprise Networks Washington University in St. Louis ACUHO-I, 30
Page 11: Life Safety Networks A Parallel Network Approach Matthew K. Arthur, CISSP Director – Enterprise Networks Washington University in St. Louis ACUHO-I, 30
Page 12: Life Safety Networks A Parallel Network Approach Matthew K. Arthur, CISSP Director – Enterprise Networks Washington University in St. Louis ACUHO-I, 30

IMPLEMENTATION

38 Buildings132 Cameras46 POE Switches4 Fiber Pick-up Switches2 Monitoring StationsNetwork Monitoring - NOCIT Costs = $213K (including fiber

upgrades)

Page 13: Life Safety Networks A Parallel Network Approach Matthew K. Arthur, CISSP Director – Enterprise Networks Washington University in St. Louis ACUHO-I, 30

CURRENT STATUS

All Buildings Installed Prior To Move-InCommunications/Coordination ProblemsAdd-On’s

Fraternity House Change OverParking GarageNew Venue in Bad Neighborhood

Main Campus PlanningFiber Infrastructure Problems…

Page 14: Life Safety Networks A Parallel Network Approach Matthew K. Arthur, CISSP Director – Enterprise Networks Washington University in St. Louis ACUHO-I, 30

FUTURES

Coordination w/ Medical SchoolChange From:

Life Safety NetworkToUniversity Services Network

Financing USN and Fiber UpgradeTraction Works…

Page 15: Life Safety Networks A Parallel Network Approach Matthew K. Arthur, CISSP Director – Enterprise Networks Washington University in St. Louis ACUHO-I, 30

QUESTIONS???

Matt [email protected]