Tailgating: Access Control Tutorial

By Brian Rhodes, Published Oct 31, 2019, 10:54am EDT

Nearly all access control systems are vulnerable to an easy exploit called 'tailgating'. Indeed, a friendly gesture in holding doors for others often compromises access security.

IPVM Image

** **** ****, ** take * **** ** 'tailgating', *** **** ****** causes, *** ******** * options ** *******/******** **********:

  • '**** ****' ******
  • **********/********* *****
  • ********/********
  • ************ *********/*********
  • ******* & *********

The *******

'**********', **** ****** '************', describes *** ********* **** a ************ ****** **** opens * **** ******** one ** **** *********** to *********** **** ******* while *** **** ** open.

*** ********* *** ******** occur **** ******* * door **** *** *******. It **** ******* ************, typically **** ******* ** focused ** ********* ****** it ******* ** **** door.

****, *** **** ***** of ***, ** **** someone ******* * ********* act ** ********* ******** behind * ***** ********** to **** *** ******** system. **********'* ****** *** render ** ****** ******** insecure.

Common ******** *** ******* *****

** **** ********, ******* the **** **** *** people ** * ****, kind **********. ********, ********** slamming *** **** **** behind *** ** ********* as ****, *** *** create *** **** ******* neighbors ** **-*******.

*******, **** ****** ** not ******** *** **** are *********** ** ****** control ****** **** ***** own '**** *******'.

IPVM Image

******, **** ******** ********** to *** ******* * door ***** *********. ********* articles ******** *** ******* of ******** *** *******, like:

*******, *** ****** ***** articles **** ** ********* is ***** *** **** secure *** ********** **** closed *** ******.

Security ********* ** ***

**** ****** ** *** deliberately **** ** ********* the ******** ******** ** a **** ** ********, but **** **** ** recognize *** ***** ***** behavior *** **.

*** **** ****** ** balance '**********' **** '********' is ********** ********* ** why, ** **, * door ** * ******** point. *** *** ******** doors, *** **** ***** frequently ****, *** *********** part ** *** ******** access ********** *********. *** if * **** ** kept ****** *** ******, or ** ** ** equipped **** ****** ******* like ******* ** *******, it ****** ***** ** held **** *** ******** kept ****** ***** ********** entry.

*** ***** ********, **** training *** **** ******* is ********* ** ********* security **********. ******** ****** and ******* ******* ** 'low ****', *** ***** effective *** ** ******* with **** ****.

IPVM Image

Other ************ *******

***** *** * ******* of ***** ********** **** causes. ************* *** '***' of **** **** ********** helps ** ********* *** best ******* ******* **:

  • Bad *******: Especially in rainy and cold climates, holding the door open offers a welcome shortcut to those seeking the warm and dry environment of a facility. In these cases, sheltered entries, **********, ** ******* **** diminish *** ******** ** hold **** ***** *** of ************* *********.
  • Misaligned/Worn *****: Over the course of thousands of open/close cycles, even commercial grade doors, hinges, frames, and closers sag or become worn over time. If left unchecked, doors may not fully close when opened or may take a long time to close, therefore allowing many people entrance from a single card read. A regular and discipline door maintenance schedule for access-controlled openings is critical to prevent the issue.
  • *************/********:***** *** * ******* of ****** **** ** keep * **** **** latching ***** ** *** been ******. *********, *****, bunched-up ****, *** ******** tampering *** *** ******** employed ** ********* *** task ** ********** * credential *** ******, ***** seen ** ******* ** employees. *** **** ******, consider ************ '******* ****' doors ** ******** ********* with ******* *** ******** systems ** ******** ********* and ******* ***** ************** paths *** ******* ******.
  • Malicious ******: Preventing untrusted or dangerous people from entering an area is often the primary goal of access control. Often, readers and locks alone are not enough to mitigate this risk despite the occurrence being minor. To properly prevent undetected entry, often additional engineering controls like sensors, analytics, or even turnstiles are needed.

Tailgating *********

*** **** ** ********** is ********** *** ****** every ****** ********** ******** is **********. ***********, * host ** *********** ******** are ********* ** ****** the *******. ** *** section ***** ** **** a **** ** *** major *****:

  • '**** ****' ******
  • **********/********* *****
  • ********/********
  • ************ *********/*********
  • ******* & *********

'Hold ****' ******

**** ****** ******* ******* have *** ******* ** monitor**** ******** ********- ****** ******** **** check ******* * **** is ****** ** *** - *** *** ** set ** ***** ** a **** ** **** open *** *** ****.

******** ****** ** ***** open ****** **** * few *******, ******* ********** that ******** ****** *** able ** **** ******* a '**** ****' ****. However, ***** **** ** a ***-**** ** **** measure *** ********** **********, it **** ** *** biggest ****** ** ******** alarming **** ***********. ****** a ******** ******** ******** its ****** ******* ******, this ******** ** ****** to ** (********) ********* as ********** *** ***********.

********** ****** ****** ******* cost ******* $*** - $400 ******* **** ****** control ******* *** ** configured ** ***** * local ***** *** ****** beeper *** **** ******** switches ** * '****' configuration *******.

Turnstiles/Revolving *****

** ****** *****, ********** have ***** **** *******, noisy ********** ******* ** sleeker, *****, *************** ****** access ******* ******. **** type ** ********* ********* entry ** * ****** person ** * **** and ********** *** ******* to **** * **** open *** ************ ******.

*** *********** ***** ***** provides ** ******* ** an '****** *********' ******** to ******** ****** **** an ******** *****, *** features '**********' *********:

** ******* **** ********** unit ** ******* **** ********* (*****)****.

*** **** ** ********** and ********* ***** *** range **** $*,*** ** $25,000+ *** *** ********** core ****** ********, *** retrofitted *************. *** ****, see ************* *****.

Mantraps/ ********

***** ************* *** ********* that ******* *** **** of ********** *****. ******* sized **** ***** ****** for *** ********, *** doors *** ********** ** open *** *** ** a ****.

**** ***** *** ******** set ****** ** ****** until *** ******** *** has **** ****** *** is ******. ******* *** physical ***** ****** * mantrap ** *****, **** one ****** *** **** read ** ********* ******* the *****.

IPVM Image

***** ************* **** * variety ** ********* **** beyond ********; ** **** cases, *** ******** ** airlocks ** ********* '***** room' ************ **** ******* contamination, ** **** *** used ** ********** *********** for **********. ***** ************* are *********, ***** ******* $10,000 ** ****, *** because **** *** ******** sets ** ***** *** have ***** ******** **********, they *** ***** *** most ****** ****-********** ********.

*** ****, *** ********* ******* ******** *****.

Piggybacking *********/*********

**** ******, ******* ***** in ******* **** ** the ***** ** * door, ** * ***** mat, ** ****** ********-****** surveillance *******, *** ********** to ****** ********** ******** through ** *******. *** movement ******* ** * single ********** ** ******** against *** ****** ******** measured ** ** *********** into ** *******.

** ******* *** *****-***** sensor ******-********** *******: ************ ******* ******** ***** of **** ******** * door:

*** ******* ** *** door-based ********* ******** **** in *** ***** ***** below:

** **** ****** * video ****** *** ******** that ******* ****** **** overhead ** ******* ******** ********* ****.

*** **** ** ***** solutions **** *** ********* range **** ~$*** *** a ****** ******** (**** camera), ** $*,***+ *** a ****** **** ********* mat ** '***** *******' sensor.

Anti-Tailgating ********* ******

***** ********* ******, *** 'best' ****** ** * tough ****** ** ******.

**** ******** ******** ***** with ********** ****** **** on ******** ************ *** signage ** ****** ********** holders ***** *** *****. Lacking *** ******* ** organizational **** ** ********* the *****, *** ************* (and ********** *****) ** tailgating ******.

** **** *****, ****** more **** ***** *** vigilance *** ********* ** deal **** *** *****, but **** *** ** used ** **** ******:

IPVM Image

** ***** ***** ***** tailgating **** ** *********, the *** ** ********** and ******* ** ******. However, *** ** *** cost ** ***** *********, many *** ***** **** them *** ********* *** instead *** *** **** costly (*** ****-*********) ******* like ********* ********* ** Video *********.

Comments (13)

**** **** **** ** only ********* *****.

* ******** ***********-************* **** ******* *********** from ***** ******, *** multiple ****** ******** ******* an ****** ****.

*** **** *** ** prevent ********** ** ** access ********** ***********, *** the ********* ****, ** to *** ***** ****** the ******. ** *** employee *****'* **** **** the ********* **** ***** point, *** *** ********* area, **** *** ****** can ** ***** ** not ***** ***** **** the **** ****, *** interior ****, ***** ****** the ******** ** ****** protocol ******. *** ***% effective ****** *** ******** good ****** *** ******* up ***** ** ***** can *** ********** ******* in * ***** ******. This *******, *****'* **** with ******* ****** ** who ** *** **** to *********** ** ****** to *** **** *** does **** **** ****** sure ********* **** **** the ******** ** ****** can ** ******* *** reporting ********.

* **** **** **** help **** *** ***** of ******* ************ ******* from ******** *** ******** by ********** ** ***** in * ****** ******* because *** ***'* ****** know *** ** ** employee *** *** ** not *** **** *** are **** ****** ** hold *** **** **** for ******* ****.

***** *** **** ***** but **** ****.

*** **** *** ** prevent ********** ** ** access ********** ***********, *** the ********* ****, ** to *** ***** ****** the ******. ** *** employee *****'* **** **** the ********* **** ***** point, *** *** ********* area, **** *** ****** can ** ***** ** not ***** ***** **** the **** ****, *** interior ****, ***** ****** the ******** ** ****** protocol ******. *** ***% effective ****** *** ******** good ****** *** ******* up ***** ** ***** can *** ********** ******* in * ***** ******.

***** ** *** ******* else ******** **** ********. Unfortunately ** ********: ******** spaces ********** **** **** tailgating ***********. **** ** often *** ** ********* leaving ***** ****** ** their *****, ** ******** with ***** ********* ********* where **** *** **** member **** ***** **********. While *** *** **** a ******* *** ********* main ********, *** ********** do *** **** ***** near *** ******** *****.

***********, * **** ****** with * ********* ******** team **** ********* ** resolve ********** ******* *******, and * **** ***** of **************. **** *** driven ******* ******** ********** by *** ******** ****: Monitoring **** ********* **********, holding ********* *********** ** they *** ******* **** in, *** ******** *********** people ** *** ******** who *** *** *** a ****.

*** ***** ******** ****** the ******* **** *** high, ** **** *** using ********** ** *****, staffing ** *****, *** used *** ***** ******** most ******** ***** ****.

*** ******* ** ************** took ***** * ***** until ** *** ********* stopping *********, ****** **** to ***** ***** *****. A ****-****** ******, ***** Security *** *** ******* out ****** ******** ********* for ***** *********. *** it ***** **?

** ******* ***** ** for ******** ***** **** critical ************** ****** ****** the **** ****.

*** **** *** ** address **** ** ******* that ******* ** *******, and **********. *** **** analytics ** *** ***** are ******* ** *** don't **** ******* *** engagement. **** ****, *** MUST ************ ******** ** that ********** ** **********.

*********** #*, *** * talk **** *** *** 10 *******?

*'* ****** ********** ******** more ***** *** ********* of **** *******. *'*******@*****.****** **** ******* * quick ***** **** ** your ******** ** ** with ***?

** **** ****** ***, put ** **** **** Tourlock ******** ******* ** all ********* ***** ****** and ****** *****. *** person ** * **** with ****** **********, *** a *** ********* *** it ****** *** *******.

*** ***** ***** **** dFlow ****'* *******, *** you ****** *** ****** walking ******* ** ******* open ***** **** *********. Not *** **** ******* I ****, ***** ** be ****** ***** ****'* work **** *** *** marketing ********!

**** ****** ***** *** have ******** ******* *** and ****** *** ******* some ******** ************ ***** they *** ****** * break ** *** ****** and ** ***** ** alarm *****. *** **** find *** ****** *** this **** ** ********* is ***** **** **** so *** ******* *** have * *********** ******** apart.

**** ***** ****, ********* times *'** **** ****** hopping ******** ********** **** one ******, ***** ** their ***** **** **** issues. ** ** ***** nobody ** ***** ****.

'**********', **** ****** '************'...

************ ** *** ***-*********, consensual **** ** **********, imho.

******* ***** ** *** at *** ********, ******* tailgating, ** *** **** wind! *** ** *** layout ** *** **************, an ******** ****** ** 15 *** ** *******, and ******** **% ** our ***** **** *** stuck ****, **** *** auto-closers ****** ** ******** the *** ******** ***********.

** **** ** **** signage ** *** ** these ***** ******* *** employees ** **** *** doors ****** ****** ****! Can *** ******* ***** told, ***** ******* **, that *** **** **** turn ******, **** **** door *** **** ** closed ****** ***? *** can ******* *** **** that ***** ***.

** ******* ****** ******* doesn't **** *** ** our ***** ****, *******, they **** ****** **** such ********, *** ****** the ****** ******** ** start ******* **** ****** like *** ***** ** the *** ** *** Poltergeist *****.

* ******* * "******" facility ** *******. **** employ **** ********** *** Man-Traps ** ********* *********. They *** ********** * nuisance ** *** ********* who ** ********** ******** to ********** ****, ********** when **** **** ********* their ********** *** **** it ****. * **** even **** *** ****** cramped **** *** "****" of * ********* **** both ****** "*********" *******. It *** ** * real ****** ** ******* is ************* ****** ** a ***** ***** ** other ******* ******.

********** ******* ** ****** the *****. *** *** only ******* *** ******** the ******** *****. ** is **** ***** ************** to ****** ** ** used ********!

********* *** ********* ** seminar ****, ** ***** be ****** ** **** the **** **** ****** than *** ********** ***** of *****.

**** ** **** ** at ******** ** ****** transport.

Read this IPVM report for free.

This article is part of IPVM's 6,738 reports, 909 tests and is only available to members. To get a one-time preview of our work, enter your work email to access the full article.

Already a member? Login here | Join now
Loading Related Reports