Escape from data Alcatraz

-There are two ways to attack a data centre very quickly," says Richard Brown solemnly, as he leads the way through the dead mans zone. -The first is to kill the power, and the second is to attack the air conditioning."

He stops for a moment before continuing the tour and points out some details which make it impossible to escape from the dimly lit metal and glass cell in which he stands.

-It is called the dead mans zone because even if someone manages to get this far into the building, they won't make it any further, and they certainly won't be able to escape," Brown says.

Built initially to house currency, the Hostworks data centre in the suburb of Kidman Park, Adelaide is a tribute to the profligacy of Timothy Marcus Clark, former head of the State Bank of South Australia. Nestled in a semi-industrial area, with minimum road signage, it is at once unassuming, virtually impenetrable and to this day an inspirational feat of excess engineering.

Any William Gibson fan knows that information is the currency of the new age, and won't be surprised that what was built as a massive bank vault, now preserves the integrity of vast amounts of data.

Triangular in shape, two of the sides house offices while the third, a large rectangular block if taken in isolation, contains two data centres, as well as the infrastructure to ensure that Web sites continue to function come fire, flood, natural catastrophy or foreign invasion.

-The centre itself has a lot of contingency built into the design," Brown says, as his footsteps echo down a chilly concrete corridor in the labyrinthine bowels of the centre.

Housed within the structure the air conditioning units take in air through cooling towers encased in armour, and draw water from no less than two totally separate water supplies, plus an onsite reservoir.

-We maintain the centre at a permanent 17-19 degrees Celsius," says Brown. -And as the heat exchanges are located within the centre they are protected from both the natural elements, and from direct attack."

Designed as a southern Fort Knox, the structure is earthquake proof, bomb resistant, and provides anti ram capabilities. Doors throughout the complex are secured with a Honeywell Access Control System, and staff working at the facility are supplied with a proximity card, which allows them access only to a specified area.

Fire prevention and control is provided through a FM200 fire suppressant system under the floor, and dry pipe sprinkler systems. The data centres are also separated by reinforced walls designed to retard fire.

Electricity is provided to the centre through three separate feeds from two different substations, and three massive UPS systems ensure that the power supply is both clean and constant. The contingency plan requires that two units be running simultaneously, in case of failure of a single unit.

There are also three wet cell battery rooms, providing back up in case all three electricity feeds suddenly drop out and threaten the centre's operations. At the heart of the electrical back up is a spotless bright blue V16 twin turbo-charged diesel generator capable of supplying the centre with up to 1.8 Mw.

-The generator set is started automatically if the power supply drops below the defined building criteria," explains Brown. -The engine is started by compressed air, and can be fed through two underground tanks, which combine to provide seven weeks capacity of Diesel."

The generator is also started up every six weeks, to make sure it is fully operational at all times.

However, unlike a jail or bank vault Hostwork's data centre also has to provide more than 75 percent of Australia's Internet users with regular access to the information hosted at the Kidman Park premises. To ensure this connectivity is maintained the centre also relies on three pipes which plug into different exchanges, in totally different parts of the state.

While the business of protecting data is serious, Brown admits the Hostworks data centre is a thrilling place to work, and while he won't be drawn on the centre's capacity, he is confident the centre is large enough to host the companys forcast growth at least over the coming years.

-We can increase our capacity by at least 300 percent before we have to think about moving," Brown says smiling. -So at this stage it looks like I will be coming down to start up the generator for some time to come."

Advertisement

Talkback 9 comments

    What about viruses? If they r ...Anonymous -- 29/12/01

    What about viruses? If they run Windows on anything that connects to the outside world, they might as well just leave the doors wide open and get rid of all the guards.

    Forget about viruses. Anybody ...George -- 29/12/01

    Forget about viruses.

    Anybody in Information Security will tell you that an organisation's greatest threat comes from within. E.g. Malicious employees, disgruntled employees, careless business practices.

    Physical security is nice, and a necessity, but the greatest amount of physical security won't help any unauthorized employees or contractors who follow behind an authorized individual into an sensitive area (and who subsequently causes mischief.)

    You think they're running Wind ...Anonymous -- 29/12/01

    You think they're running Windows, and are worried about viruses? They said it was a "data center", not a game room!

    Outstanding, with one exceptio ...Sgt_Jake -- 29/12/01

    Outstanding, with one exception. The data centers should be in separate geographical locations with atm lines for synchronization. The company I work for has 3 locations, all in different parts of the US that work in concert (I.E. they are not 'backup sites', they are fully functional and RUNNING sites). We don't have armor plating though. :) Very cool, I'd love a tour.

    And for those above who are worried about virus', internal attacks, etc. - you're missing the point. If your machines get infected with a virus, or if your users expose your data, the cost to recover the site is hours with a good team and good backups. Maybe days if that person or infiltrator does significant damage (like cutting a backbone access line, kicking in a main router or slashing a dmark, which still wouldn't hurt the site described above since they have multiple delivery lines at separate points). If your data center is destroyed (Sept. 11th style), you're down for weeks, if not months while you FIND a place to house your gear, buy new gear & replace the infrastructure (cabling, generator, ups, etc), sign new contracts for backbone access, reroute internally and at the telco level, restore the systems. You'd have to rebuild the site from the ground up.

    Sgt_Jake

    If they run unix they might as ...Anonymous -- 29/12/01

    If they run unix they might as well "echo "ALL:ALL > /etc/hosts.deny", else there wouldnt be any need for the guards.

    I bet James Bond or Tom Cruise ...Anonymous -- 29/12/01

    I bet James Bond or Tom Cruise from Mission Impossible could get in.

    In my opinion someone had too ...Anonymous -- 30/12/01

    In my opinion someone had too much money and wanted to spend them some way, no matter how stupid... By the way: all that described security systems fail when attacked by EMP (electromagnetic pulse - nukes generate beautiful ones).

    pah..that's nothing - you sho ...J Doe -- 30/12/01

    pah..that's nothing - you should see my basement

    Bond, Cruise or Redford? Hm. F ...Anonymous -- 31/12/01

    Bond, Cruise or Redford? Hm.

    Fictional references aside, I have to note a few things and ask a few questions...

    a) How do we KNOW Hostworks is physically secure? (I know I said fictions aside, but) Has Hostworks actually tried hiring anybody Sneakers-like to actually try hitting the place? Designers don't always pick up all the threats.

    b) A point I'm sure others have raised (at least on Slashdot which linked to this story), is the DATA side secure?

    c) Power and air-conditioning certainly aren't the ONLY vulnerabilities. All it takes is one inside-wo/man. That solves the physical access problem. Besides that, why attack the air-conditioning from the outside? Granted, the air-conditioning systems are armoured, but is there any defense against dropping smoke, gas or even (let's be honest) anthrax-bombs INSIDE a sealed building? Are the staff being carefully screened too?

    d) That deadman's zone... where I work, I'm a fire warden for my building. The idea of a building with sealed, recycled atmosphere and an inescapable area doesn't sound like a legally safe area to work in. Security's not just about stopping people getting in (or out), it's more about keeping the right stuff in the right place - SAFELY.

    e) Question (kind of referring to point [a])... who IS Richard Brown? From the short article, he sounds vaguely like someone in technical support (or a particularly well trained managerial man)...

Add your opinion

Latest Videos

Sponsored content

Power Centre - Content from our premier sponsors

Blogs

  • Suzanne Tindal Love me, tender
    Considering how expensive and drawn-out tender processes can be to solve problems that might be very immediate, it's little wonder that the Victorian Police IT department tried to work the tender exemptions system.
  • Array 2009 funding drought rolls on
    For Australian start-ups looking for venture capital, 2009 was a very bad year. 2010 may be no better.
  • Array Can not-so-smart meters help the NBN?
    It was interesting to witness Conroy's recent enthusiasm to spruik the NBN's role in supporting the Smart Grid, Smart City initiative. What a pity that Conroy hadn't yet seen the damning report from the Victorian auditor-general about that state's smart-meter roll-out.
  • More blogs »

Tags

Back to top

Featured