Organizations rely on physical, technical and procedural mechanisms to protect their physical assets. Of all physical assets, laptops are the probably the most troublesome to protect, since laptops are easy to remove and conceal. Organizations open to the public, such as hospitals and universities, are easy targets for laptop thieves, since every day hundreds of people not employed by the organization wander in the premises. The problem security professionals face is how to protect the laptops in such open organizations. ududIn this study, we look at the eectiveness of the security mechanisms against laptop theft in two universities. We analyze the logs from laptop thefts in both universities and complement the results with penetration tests. The results from the study show that surveillance cameras and access control have a limited role in the security of the organization and that the level of security awareness of the employees plays the biggest role in stopping theft. The results of this study are intended to aid security professionals in the prioritization of security mechanisms.
展开▼
机译：组织依靠物理，技术和程序机制来保护其物理资产。在所有有形资产中，笔记本电脑可能是最麻烦的保护方法，因为笔记本电脑易于拆卸和隐藏。诸如医院和大学之类的向公众开放的组织很容易成为笔记本电脑小偷的目标，因为每天都有成百上千的不受该组织雇用的人在该场所徘徊。安全专业人员面临的问题是如何在这样的开放组织中保护笔记本电脑。 ud ud在这项研究中，我们研究了两所大学针对笔记本电脑被盗的安全机制的有效性。我们分析了两所大学笔记本电脑失窃的日志，并通过渗透测试对结果进行了补充。研究结果表明，监控摄像头和访问控制在组织安全中的作用有限，员工的安全意识水平在阻止盗窃方面发挥了最大作用。这项研究的结果旨在帮助安全专业人员确定安全机制的优先级。
展开▼
