Alerting Against Unlocked Doors

Author: Ethan Ace, Published on May 12, 2012

 

Unlocked doors are a key vulnerability of many access control systems. While a door may be closed, it can easily be kept unlocked, allowing an adversary to later enter without any authentication. Adding lock status monitoring can prevent this. In this note, we explain the risks, the solution, its cost and implementation.

Why ***** * **** **?

*********** *** ****** ******** ******* *** ******** **** ******* *** simply. ******** ******* *** ** ******** ** ******* ******* ******* in *** ******, ** *** ********* ***** ***** *******. ********** may **** ** **** ** **** **** ** ********** **** so **** ***** ****** ** ***. ******** ***** ******** ***** amounts ** ******* *****, *** **** **** *** ****** *** the ****** ***** ***** *** ****** *****. ******* ***** ***** drastically ** *** *** *** **** ******* *****, **** ********** of ** ****. ** ******** * *******’* ******* ***** ** a ***** ***** ** *** ** ****** ****** ** ** easy ** ********* *** ***-******** ******** ******* *** **** *** strike *****. ******** *** ******* *** **** ******.

********, ******** ** ****** ***** ***** **** **** ********, ***** they *** **** ******* ***** *****. ****** *** ***** ** while ** *** ** ******, ******** *** ********** ***** *****, returning *****, ****** ********** ** **** ***********, *** **** **** entry ******* *** ****. ********* *** **** ****** ** ****** the ****, *******, ********* ****-**** ***** **** *** ** ******, most ********, ****** *** ***.

What ** **?

****** ***, **** ******* ******** **** * **** ** ****** and ******. *********, ** ******-********** **** ******** * ******, * request-to-exit, * **** ********, *** * **** ** **** ****. The **** ******** ****** ***** *** ****** ******* *** **** is **** ** ******. ** ** **** **** *** ****** and *******-**-**** ****** ** **** ******* * **** *** **** forced **** ** ** * ***** **** **** ** *******-**-**** has ********. *******, ****** ******* ******* *** **** ** **** or ****** **** *** ******** ******* ** ** ****** ** unlocked, ** ******** ***** ** *** ****** ***** *****.

***** **** ********** ******** **** ****** ******** ***** **** ****, in ******** ** *** ***** *****.

****'* ** ***** ******* *** ******** ** *** ********** ****** inside * ****:

**** *** **** ** *******, *** ******* ******. **** ***, the ****** *** *** **** *** **** ** ******. ** monitor ********* ******, * *********** ******* ******* *** ********* *** fully ******** **** *** ****** ******. ******** **** ******* ******* whether *** ****** ***** *** ******** ******** *** ******* *** holding ********. ***** ******** *** *** ****, *******. ***** ****** expect ************* **-**% ***** **** *** ****, ** ~$**-$**.

** *** **** ** ***** ******* **** *******, ******** **** typically **** ** ** ********. **** ******* ************* ******* * bond ****** ******** *** *** ***** *****, *** *** ***. We **** ** ** ******** **** *** ******** *******.

How ** ** ****?

*** ******** *** ** *** **** ********** ** ** **** the ******** ** ****** **** *** **** ******** ******. ****, instead ** ****** ******* * **** ** **** ** ******, the ****** ***** *** ** ** **** *** *** ****** or ****** *** ******. **********, **** ********** ******* *** ** run ** ******** ****** *** **** ******** **********. ** *** wants ** ******* **** ****** **********, **** ****** *** **** be ****** ** ******* *********. ***** ******** ****** *** *** that ****** ** **** ******, *** ** ******* ***** ********** signals ****** ** ********* **********. ***** **** ********** ****** ********** systems ******* **** ****** ** * ****** *****, *** ***** software ******* ****, ** ******* **** ********** ** ********.

Login to read this IPVM report.
Why do I need to log in?
IPVM conducts unique testing and research funded by member's payments enabling us to offer the most independent, accurate and in-depth information.

Related Reports

Nest Secure Alarm System Tested on Nov 16, 2017
Google's expansion continues, this time into home security with their Nest subsidiary's move into alarm systems. They paid more than a...
Milestone XProtect Essential+ Free VMS Tested on Nov 09, 2017
Milestone continues to expand its aggressive free and low-cost offerings, with this year, Milestone releasing XProtect Essential+, part of their...
Assa August Smartlock Pro Tested on Nov 07, 2017
Failures and set backs in the smartlock business have been commonplace (e.g., Lockitron Admits Failure and issues from our 2017 Kevo test). But...
Honeywell Indiegogo-Funded DIY Intrusion System Examined on Nov 02, 2017
Honeywell did $39 Billion dollars in revenue last year, but they are asking the public for $50,000 (.0001% of revenue) to fund their Indiegogo...
Assa Abloy Acquires August on Oct 25, 2017
The mega access control manufacturer, Assa Abbloy, has acquired one of the most well funded access control startups, smart lock...
Door Closers Access Control Tutorial on Oct 24, 2017
Door Closers have an important job: automatically shut doors when they are opened, because an open door cannot control access. In this note, we...
Search More Important Than Live Monitoring - Statistics on Oct 18, 2017
Search is overall more important than live monitoring to integrators, according to new IPVM statistics.  The key themes found in integrator...
Multipoint Lock Access Control Tutorial on Oct 17, 2017
Doors are notoriously weak at stopping entry, and money can be misspent on wrong locks that leave doors quite vulnerable. While closed and locked...
Exacq M Series Low Cost NVR Tested on Oct 12, 2017
With recent cyber security issues hitting NVRs and cameras from low cost leaders Dahua and Hikvision, users are increasingly seeking alternatives...
PoE Powered Access Control Tutorial on Oct 12, 2017
Powering access control with Power over Ethernet, like for IP cameras, has become increasingly common.  However, the demands for access power are...

Most Recent Industry Reports

Panasonic Unified Surveillance Strategy Analyzed on Nov 17, 2017
Panasonic is now a "Unified Surveillance" offering, as their ASIS 2017 booth proclaimed: Looking to make a comeback in the security industry,...
Amazon Cloud Cam Is Poor (Tested) on Nov 17, 2017
Retail behemoth Amazon has entered the surveillance market with the Amazon Cloud Cam, the eyes of its just-announced Amazon Key delivery...
Nest Secure Alarm System Tested on Nov 16, 2017
Google's expansion continues, this time into home security with their Nest subsidiary's move into alarm systems. They paid more than a...
Dahua Forbes 'Next Web Crisis' Vulnerability Dispute on Nov 16, 2017
The buffer overflow vulnerability in Dahua products is not in dispute, in fact we covered it when it was first published. What is in dispute is...
Isonas Cofounders Split, Launch Partner/Competitor on Nov 16, 2017
Breaking up is hard to do, especially when door access security is at stake. But that is exactly what has happened at Isonas. Senior employees...
Hikvision China Criticizes The WSJ on Nov 15, 2017
Hikvision, through the Chinese government's authoritative news service, has criticized the WSJ investigation into Hikvision. In this...
PoE UPS Tested (Energy Reconnect) on Nov 15, 2017
In security, backup power is important, but most often requires UPS systems or extra cabling to devices for low voltage power. Now, some have...
Axis Commits To Long-Term Firmware Support on Nov 15, 2017
With the rise of cyber security awareness, and a general increase in hardware reliability, "software warranties" may prove more valuable than...
Hikvision NVR 4.0 Improvements Tested on Nov 14, 2017
Hikvision has released firmware version 4.0 for select NVRs, touting two years of research and development, and claiming "the new generation GUI...
Vivotek Remote Stack Overflow Vulnerability on Nov 14, 2017
A stack overflow vulnerability in Vivotek cameras has been discovered by bashis, the security researcher who has also found vulnerabilities in...

The world's leading video surveillance information source, IPVM provides the best reporting, testing and training for 10,000+ members globally. Dedicated to independent and objective information, we uniquely refuse any and all advertisements, sponsorship and consulting from manufacturers.

About | FAQ | Contact