Data center security

Data center security

Efficient security screening for data centers

Data centers are critical infrastructure, responsible for storing and processing vast amounts of sensitive data. They play a crucial role in our digital, connected economy and are even more important with the increasing use of AI technologies.

Data center security prevents key threats such as:

  • Insider threats: Malicious actions carried out by individuals with authorized access to the data center, whether intentional or unintentional. This includes individuals from various clients hosting equipment, each with their own staff and service technicians.
  • Data theft: Unauthorized removal of sensitive information.
  • Sabotage: Damage or disruption of operations inside the data center. It can result from external or internal attacks (e.g. disgruntled employees).

To prevent these attacks and mitigate the risk through insider threats, a comprehensive security screening concept including cybersecurity and the physical protection of data is essential.
In the past, advanced security technology solutions such as millimeter wave (mmWave) technology were reserved for airport security operations. Nowadays, it is a major security component across various sectors, including data centers.

Layered physical security in data centers

Data centers and their clients in industry, government, military, and the public rely on data integrity and seamless access to data center resources – making them a prime target for any kind of threats. Protecting data centers against all types of threats and at every level is crucial. By implementing security measures at multiple levels, a robust defense strategy is established. Each level addresses specific vulnerabilities and threats, providing a layered security approach. A multi-level physical data center security framework enhances risk mitigation effectively.

Perimeter security:

By protecting the outer boundary of the data center, unauthorized access and potential threats can be deterred. Perimeter security also includes protection against a range of risks, such as metallic and non-metallic weapons, and prohibited items such as cameras, phones, and drones. Typically located at the building entrance, security measures can include physical barriers, controlled access points, and trained security staff. Implementing walk-through body scanners like the R&S®QPS Walk2000 provides a seamless and contactless screening process to control the data center entry.

Server room security:

Server room security focuses on protecting critical equipment and sensitive data inside the data center. The primary focus lies in detecting and preventing unauthorized data-bearing devices such as SD cards or USB sticks, as well as identifying and mitigating potential threats that damage and sabotage data (e.g. explosives, liquids, flammables, cable cutting devices). Security screenings are conducted at both entry and exit points of the server room.

Human-Centered Security Lab

Step into the future of security with a new initiative from Rohde & Schwarz, in collaboration with essentry and e-shelter. The Human-Centered Security Lab (HCSL) demonstrates how to design a secure process for accessing critical infrastructures by testing selected technologies under realistic conditions.

Data center physical security with mmWave technology – a solution to your challenges

State-of-the-art mmWave security scanners such as the R&S®QPS201 and R&S®QPS Walk2000 effectively address the main challenges in data center security.

Security staff shortages:

Finding qualified security personnel able to manage and monitor the extensive security protocols necessary at data centers is an ongoing challenge. Shortages may result in overworked staff, leading to increased risks of human error and possible security gaps.

Rohde & Schwarz QPS security scanners release security staff from routines – so they can focus on their core tasks – through:

  • Fast, effective screening with no or minimum operator interaction needed
  • The support of IP integration for remote self-screening checkpoints
  • AI-based automatic anomaly detection and precise positioning, which limit additional manual searches to an absolute minimum and support remote alarm resolution. This means that uncomfortable and time-consuming full-body pat-downs are not needed anymore.

Cost-intensive 24/7 monitoring:

Maintaining continuous, around-the-clock monitoring of a data center is expensive, requiring substantial investment in both technology and personnel. The need for remote screening operations to facilitate low-volume access to critical areas has become increasingly apparent.

The R&S®QPS security scanners reduce staffing needs and costs and provide:

  • Integration with remote self-screening checkpoints
  • Possibility to integrate with a building’s IoT infrastructure and implementing physical security as part of a holistic, fully integrated layered security

Evolving threats and data-bearing devices:

Data centers are constantly confronted with evolving threats, such as sophisticated methods for smuggling data-bearing devices (e.g. USB drives and portable storage devices) as well as any object and substance that can be used for sabotage and damage to the servers. The challenge for data center security solutions lies in covering this wide range of metallic and non-metallic threats and adapting to the constantly advancing technology landscape. Staying ahead of the latest threat vectors and ensuring that security measures can detect emerging types of devices remains an ongoing struggle.

With the help of innovative microwave imaging (MI) technology, mmWave security scanners are able to detect an extremely wide range of body-bound contraband, hidden threats, and other unwanted metallic and non-metallic objects such as ceramics, plastics, glass, liquids, organics, granulates, powders, jelly, and much more.

Rohde & Schwarz security scanners utilize deep learning mechanisms and operate with high-precision, AI-based automatic detection algorithms, specifically optimized for data center security needs and are constantly adapted to evolving threats and needs. AI-based automatic anomaly detection is superior to human-based recognition and delivers 24/7 operator-independent screening quality.

Efficient and smooth screening:

Ensuring thorough screening of individuals entering the data center, whilst minimizing delays, poses a significant challenge.

When implementing R&S®QPS body scanners, data centers benefit from:

  • Fast, intuitive full-body screening through remote-controlled self-screening checkpoints
  • No or minimal divestment of jackets or safety vests (only applies to the R&S®QPS Walk2000)
  • Precise anomaly detection, which reduces additional manual searches to an absolute minimum

Holistic security concept:

Developing and implementing a comprehensive security strategy that effectively addresses all potential threats and vulnerabilities is complex and demanding. Security scanners need to be part of an integrated security concept as a crucial pillar for protection.

The R&S®QPS201 and R&S®QPS Walk2000 provide:

  • Integration with remote self-screening checkpoints
  • Possibility to integrate with a building’s IoT infrastructure and implementing physical security as part of a holistic, fully integrated layered security
  • A QPS-Server option for networking and centralized management as well as supervision of all scanners on-site or company-wide independent of physical location
  • The support of forensic data analysis and evidence in case of incidents and legal investigations

Privacy and health concerns:

Security screening often raises health and privacy concerns which gets addressed by mmWave scanners. By utilizing AI-based automated target recognition and its display on a gender-neutral avatar, the privacy of screened individuals is protected, and additional manual searches are reduced to an absolute minimum. As a result, they have become the “gold standard” in security screening technologies.

The Rohde & Schwarz security scanners use touchless screening with non-intrusive radio waves at extremely low power density.

  • Radio waves do not penetrate the skin and are harmless for pregnant women or people with medical implants.
  • No personal data is recorded. All scan data (besides statistics) is only recorded temporarily and overwritten with the next scan. The data cannot be accessed by the operator.
  • Rohde & Schwarz does not use data for deep learning in the field.

The low power density is multiple orders of magnitude below international safety limits defined by the International Commission on Non-Ionizing Radiation Protection (ICNIRP). For example:

  • Scans with the R&S®QPS201 equal a ~1min cell phone call.
  • A Bluetooth device headset has an 800x higher power density than the R&S®QPS Walk2000.

High-precision data center security screening solutions

Benefits of the Rohde & Schwarz data center security solutions

Protect your data center: Enhance your data center’s integrity and protect your business model by including state-of-the-art millimeter wave security screening solutions as a key component of your comprehensive layered security concept.

Screen smoothly and respectfully: By implementing proven, aviation-grade, contactless people-screening technology, the privacy and dignity of individuals entering your data center is protected .

Reduce security staff dependencies: Rohde & Schwarz highly automated security solutions reduce dependencies on highly trained staff, OPEX and act staff-independently.

Use a safe technology: Rely on non-invasive mmWaves that only pass through clothing, without entering the body or skin, requiring minimal removal of outerwear.

Protect your investment: Rohde & Schwarz security scanners provide a future-proof platform designed with future hardware and software.technology insertions in mind. Benefit from constantly advancing AI-based detection algorithms and be prepared for evolving threats.

Want to speak to an expert about your data center security needs?

Discover our data center related videos and references

Video: Securitas remote screening solution

Rohde & Schwarz helps to diversify Securitas' solution offering by remote checkpoints for data centers and other applications.

Watch Video

Protecting critical infrastructures: KRITIS and EU NIS2

Learn how our security solutions can help your data center comply with EU NIS2 and the KRITIS law in Germany.

More information

Video: Safe millimeter wave radio technology explained

Security threats today evolve rapidly, and in an ever-changing environment, technology solutions must keep up. To counter current and emerging threats, security operators need technology solutions that can quickly adapt. Utilizing safe millimeter wave radio technology, the R&S®QPS automatically identifies concealed objects and threats.

Watch Video

Video: Revolutionizing Security Screening with the R&S®QPS Walk2000

Discover the future of security screening with the R&S®QPS Walk2000, an innovative solution that combines security, speed, and cost-effectiveness.

Watch Video

Data center security FAQ

What is data center security?

As part of vital Critical Infrastructure, data centers are a prime target for any kind of sabotage, espionage or disruption. Threats are prominent in the cyberspace as well as in the physical world. Therefore, data centers need holistic, integrated security concepts and solutions, covering cybersecurity as well as physical security.

How are data centers physically secured?

Data centers have to take measures to protect their vital assets at all levels, starting with perimeter protection (L1/2 – deter and detect intruders), building access (L3 – knowing who comes, what does the person take with them, access rights, protocol), data floor/server rooms (L5 – “clean in/clean out” screening to ensure that no dangerous, prohibited items are carried in or out, very restrictive access down to individual server, tracking ...), all elements and processes integrated and supervised by Security Operation Center (L4 – SOC).

(Layered Security / Levels are exemplary and can be different, typically 5 Layers, while other DC operators define 6 or more layers.)

What are physical threats to data centers?

Anything which could be used to disrupt operations, allows unauthorized access to and stealing of data or may bring in malicious software for espionage, cyber attacks, disruption or criminal acts by blackmail, ransomware.

This can be ‘classic’ threats such as any kind of metallic and non-metallic weapons, explosives, liquids, flammables, acids, cable cutting devices, etc., as well as prohibited items such as cameras, phones, drones, or electronics that need to be detected when entering the data center.

Server rooms need another layer of protection to detect data-bearing devices of any kind as well as tools and items useable for sabotage and disruption, such as explosives, liquids, flammables, and acids. Security checks at the data floor take place before entry as well as with exit.

Why is data center (DC) security seeking to gain more independency from security staff?

Data Centers are suffering from qualified security staff shortages and increasing costs. 24/7 security for comparably low footfall in data centers results in significant manpower cost share while dependencies on security staff qualification and motivation leave additional security risks. Remote or automated checkpoints with integrated, advanced technology (such as AI-based mmWave scanners with automatic target detection) under control of centralized SOCs address a state-of-the-art level of security and reduce security staffing, costs, and dependencies.

Request information

Do you have questions or need additional information regarding our people screening solutions? Fill out this form and one of our security screening experts will get back to you shortly.

Marketing-Einverständniserklärung

Thank you for your request. A Rohde & Schwarz security screening expert will get back to you shortly.

An error is occurred, please try it again later.