[PEN-TEST] Datacenter Wiring

[Tom Litney <Tom.Litney () NET-RELIANCE COM>]

I would like to throw a topic out for discussion to all you pen-experts out
there.  When examining datacenters you usually find that the wires are
either run out in the open (loose under raised floor is considered to be in
the open for this discussion) or hidden in conduit.  From a penetration
standpoint do you feel it is easier to compromise exposed wiring or "hidden"
wiring?  I'm interested in opinions regarding the ease of identifying the
target wire as well as the ability to avoid detection.  Assume that the
penetration could include tapping, inductive sniffing, electromagnetic
disturbances, etc.  Which wiring technique would you suggest your clients
use to provide them with the "best" security against penetrators?  So do you
consider yourself a "wire walker" or a conduit person?

Basic Assumptions:  We are talking about a normal datacenter here not some
superspook site with poison gas filled conduit or wire buried in tons of
concrete.  Also, the exposed wiring is assumed to be tastefully done (not
some "rats nest") and well labeled.

   Tom