Tailgating: Access Control Tutorial

By: Brian Rhodes, Published on Oct 31, 2019

Nearly all access control systems are vulnerable to an easy exploit called 'tailgating'. Indeed, a friendly gesture in holding doors for others often compromises access security.

IPVM Image

** **** ****, ** take * **** ** 'tailgating', *** **** ****** causes, *** ******** * options ** *******/******** **********:

  • '**** ****' ******
  • **********/********* *****
  • ********/********
  • ************ *********/*********
  • ******* & *********

The *******

'**********', **** ****** '************', describes *** ********* **** a ************ ****** **** opens * **** ******** one ** **** *********** to *********** **** ******* while *** **** ** open.

*** ********* *** ******** occur **** ******* * door **** *** *******. It **** ******* ************, typically **** ******* ** focused ** ********* ****** it ******* ** **** door.

****, *** **** ***** of ***, ** **** someone ******* * ********* act ** ********* ******** behind * ***** ********** to **** *** ******** system. **********'* ****** *** render ** ****** ******** insecure.

Common ******** *** ******* *****

** **** ********, ******* the **** **** *** people ** * ****, kind **********. ********, ********** slamming *** **** **** behind *** ** ********* as ****, *** *** create *** **** ******* neighbors ** **-*******.

*******, **** ****** ** not ******** *** **** are *********** ** ****** control ****** **** ***** own '**** *******'.

IPVM Image

******, **** ******** ********** to *** ******* * door ***** *********. ********* articles ******** *** ******* of ******** *** *******, like:

*******, *** ****** ***** articles **** ** ********* is ***** *** **** secure *** ********** **** closed *** ******.

Security ********* ** ***

**** ****** ** *** deliberately **** ** ********* the ******** ******** ** a **** ** ********, but **** **** ** recognize *** ***** ***** behavior *** **.

*** **** ****** ** balance '**********' **** '********' is ********** ********* ** why, ** **, * door ** * ******** point. *** *** ******** doors, *** **** ***** frequently ****, *** *********** part ** *** ******** access ********** *********. *** if * **** ** kept ****** *** ******, or ** ** ** equipped **** ****** ******* like ******* ** *******, it ****** ***** ** held **** *** ******** kept ****** ***** ********** entry.

*** ***** ********, **** training *** **** ******* is ********* ** ********* security **********. ******** ****** and ******* ******* ** 'low ****', *** ***** effective *** ** ******* with **** ****.

IPVM Image

Other ************ *******

***** *** * ******* of ***** ********** **** causes. ************* *** '***' of **** **** ********** helps ** ********* *** best ******* ******* **:

  • Bad *******: Especially in rainy and cold climates, holding the door open offers a welcome shortcut to those seeking the warm and dry environment of a facility. In these cases, sheltered entries, **********, ** ******* **** diminish *** ******** ** hold **** ***** *** of ************* *********.
  • Misaligned/Worn *****: Over the course of thousands of open/close cycles, even commercial grade doors, hinges, frames, and closers sag or become worn over time. If left unchecked, doors may not fully close when opened or may take a long time to close, therefore allowing many people entrance from a single card read. A regular and discipline door maintenance schedule for access-controlled openings is critical to prevent the issue.
  • *************/********:***** *** * ******* of ****** **** ** keep * **** **** latching ***** ** *** been ******. *********, *****, bunched-up ****, *** ******** tampering *** *** ******** employed ** ********* *** task ** ********** * credential *** ******, ***** seen ** ******* ** employees. *** **** ******, consider ************ '******* ****' doors ** ******** ********* with ******* *** ******** systems ** ******** ********* and ******* ***** ************** paths *** ******* ******.
  • Malicious ******: Preventing untrusted or dangerous people from entering an area is often the primary goal of access control. Often, readers and locks alone are not enough to mitigate this risk despite the occurrence being minor. To properly prevent undetected entry, often additional engineering controls like sensors, analytics, or even turnstiles are needed.

Tailgating *********

*** **** ** ********** is ********** *** ****** every ****** ********** ******** is **********. ***********, * host ** *********** ******** are ********* ** ****** the *******. ** *** section ***** ** **** a **** ** *** major *****:

  • '**** ****' ******
  • **********/********* *****
  • ********/********
  • ************ *********/*********
  • ******* & *********

'Hold ****' ******

**** ****** ******* ******* have *** ******* ** monitor**** ******** ********- ****** ******** **** check ******* * **** is ****** ** *** - *** *** ** set ** ***** ** a **** ** **** open *** *** ****.

******** ****** ** ***** open ****** **** * few *******, ******* ********** that ******** ****** *** able ** **** ******* a '**** ****' ****. However, ***** **** ** a ***-**** ** **** measure *** ********** **********, it **** ** *** biggest ****** ** ******** alarming **** ***********. ****** a ******** ******** ******** its ****** ******* ******, this ******** ** ****** to ** (********) ********* as ********** *** ***********.

********** ****** ****** ******* cost ******* $*** - $400 ******* **** ****** control ******* *** ** configured ** ***** * local ***** *** ****** beeper *** **** ******** switches ** * '****' configuration *******.

Turnstiles/Revolving *****

** ****** *****, ********** have ***** **** *******, noisy ********** ******* ** sleeker, *****, *************** ****** access ******* ******. **** type ** ********* ********* entry ** * ****** person ** * **** and ********** *** ******* to **** * **** open *** ************ ******.

*** *********** ***** ***** provides ** ******* ** an '****** *********' ******** to ******** ****** **** an ******** *****, *** features '**********' *********:

** ******* **** ********** unit ** ******* **** ********* (*****)****.

*** **** ** ********** and ********* ***** *** range **** $*,*** ** $25,000+ *** *** ********** core ****** ********, *** retrofitted *************. *** ****, see ************* *****.

Mantraps/ ********

***** ************* *** ********* that ******* *** **** of ********** *****. ******* sized **** ***** ****** for *** ********, *** doors *** ********** ** open *** *** ** a ****.

**** ***** *** ******** set ****** ** ****** until *** ******** *** has **** ****** *** is ******. ******* *** physical ***** ****** * mantrap ** *****, **** one ****** *** **** read ** ********* ******* the *****.

IPVM Image

***** ************* **** * variety ** ********* **** beyond ********; ** **** cases, *** ******** ** airlocks ** ********* '***** room' ************ **** ******* contamination, ** **** *** used ** ********** *********** for **********. ***** ************* are *********, ***** ******* $10,000 ** ****, *** because **** *** ******** sets ** ***** *** have ***** ******** **********, they *** ***** *** most ****** ****-********** ********.

*** ****, *** ********* ******* ******** *****.

Piggybacking *********/*********

**** ******, ******* ***** in ******* **** ** the ***** ** * door, ** * ***** mat, ** ****** ********-****** surveillance *******, *** ********** to ****** ********** ******** through ** *******. *** movement ******* ** * single ********** ** ******** against *** ****** ******** measured ** ** *********** into ** *******.

** ******* *** *****-***** sensor ******-********** *******: ************ ******* ******** ***** of **** ******** * door:

*** ******* ** *** door-based ********* ******** **** in *** ***** ***** below:

** **** ****** * video ****** *** ******** that ******* ****** **** overhead ** ******* ******** ********* ****.

*** **** ** ***** solutions **** *** ********* range **** ~$*** *** a ****** ******** (**** camera), ** $*,***+ *** a ****** **** ********* mat ** '***** *******' sensor.

Anti-Tailgating ********* ******

***** ********* ******, *** 'best' ****** ** * tough ****** ** ******.

**** ******** ******** ***** with ********** ****** **** on ******** ************ *** signage ** ****** ********** holders ***** *** *****. Lacking *** ******* ** organizational **** ** ********* the *****, *** ************* (and ********** *****) ** tailgating ******.

** **** *****, ****** more **** ***** *** vigilance *** ********* ** deal **** *** *****, but **** *** ** used ** **** ******:

IPVM Image

** ***** ***** ***** tailgating **** ** *********, the *** ** ********** and ******* ** ******. However, *** ** *** cost ** ***** *********, many *** ***** **** them *** ********* *** instead *** *** **** costly (*** ****-*********) ******* like ********* ********* ** Video *********.

Comments (11)

**** **** **** ** only ********* *****.

* ******** ***********-************* **** ******* *********** from ***** ******, *** multiple ****** ******** ******* an ****** ****.

*** **** *** ** prevent ********** ** ** access ********** ***********, *** the ********* ****, ** to *** ***** ****** the ******. ** *** employee *****'* **** **** the ********* **** ***** point, *** *** ********* area, **** *** ****** can ** ***** ** not ***** ***** **** the **** ****, *** interior ****, ***** ****** the ******** ** ****** protocol ******. *** ***% effective ****** *** ******** good ****** *** ******* up ***** ** ***** can *** ********** ******* in * ***** ******. This *******, *****'* **** with ******* ****** ** who ** *** **** to *********** ** ****** to *** **** *** does **** **** ****** sure ********* **** **** the ******** ** ****** can ** ******* *** reporting ********.

* **** **** **** help **** *** ***** of ******* ************ ******* from ******** *** ******** by ********** ** ***** in * ****** ******* because *** ***'* ****** know *** ** ** employee *** *** ** not *** **** *** are **** ****** ** hold *** **** **** for ******* ****.

***** *** **** ***** but **** ****.

*** **** *** ** prevent ********** ** ** access ********** ***********, *** the ********* ****, ** to *** ***** ****** the ******. ** *** employee *****'* **** **** the ********* **** ***** point, *** *** ********* area, **** *** ****** can ** ***** ** not ***** ***** **** the **** ****, *** interior ****, ***** ****** the ******** ** ****** protocol ******. *** ***% effective ****** *** ******** good ****** *** ******* up ***** ** ***** can *** ********** ******* in * ***** ******.

***** ** *** ******* else ******** **** ********. Unfortunately ** ********: ******** spaces ********** **** **** tailgating ***********. **** ** often *** ** ********* leaving ***** ****** ** their *****, ** ******** with ***** ********* ********* where **** *** **** member **** ***** **********. While *** *** **** a ******* *** ********* main ********, *** ********** do *** **** ***** near *** ******** *****.

***********, * **** ****** with * ********* ******** team **** ********* ** resolve ********** ******* *******, and * **** ***** of **************. **** *** driven ******* ******** ********** by *** ******** ****: Monitoring **** ********* **********, holding ********* *********** ** they *** ******* **** in, *** ******** *********** people ** *** ******** who *** *** *** a ****.

*** ***** ******** ****** the ******* **** *** high, ** **** *** using ********** ** *****, staffing ** *****, *** used *** ***** ******** most ******** ***** ****.

*** ******* ** ************** took ***** * ***** until ** *** ********* stopping *********, ****** **** to ***** ***** *****. A ****-****** ******, ***** Security *** *** ******* out ****** ******** ********* for ***** *********. *** it ***** **?

** ******* ***** ** for ******** ***** **** critical ************** ****** ****** the **** ****.

*** **** *** ** address **** ** ******* that ******* ** *******, and **********. *** **** analytics ** *** ***** are ******* ** *** don't **** ******* *** engagement. **** ****, *** MUST ************ ******** ** that ********** ** **********.

*********** #*, *** * talk **** *** *** 10 *******?

*'* ****** ********** ******** more ***** *** ********* of **** *******. *'*******@*****.****** **** ******* * quick ***** **** ** your ******** ** ** with ***?

** **** ****** ***, put ** **** **** Tourlock ******** ******* ** all ********* ***** ****** and ****** *****. *** person ** * **** with ****** **********, *** a *** ********* *** it ****** *** *******.

*** ***** ***** **** dFlow ****'* *******, *** you ****** *** ****** walking ******* ** ******* open ***** **** *********. Not *** **** ******* I ****, ***** ** be ****** ***** ****'* work **** *** *** marketing ********!

**** ****** ***** *** have ******** ******* *** and ****** *** ******* some ******** ************ ***** they *** ****** * break ** *** ****** and ** ***** ** alarm *****. *** **** find *** ****** *** this **** ** ********* is ***** **** **** so *** ******* *** have * *********** ******** apart.

**** ***** ****, ********* times *'** **** ****** hopping ******** ********** **** one ******, ***** ** their ***** **** **** issues. ** ** ***** nobody ** ***** ****.

'**********', **** ****** '************'...

************ ** *** ***-*********, consensual **** ** **********, imho.

******* ***** ** *** at *** ********, ******* tailgating, ** *** **** wind! *** ** *** layout ** *** **************, an ******** ****** ** 15 *** ** *******, and ******** **% ** our ***** **** *** stuck ****, **** *** auto-closers ****** ** ******** the *** ******** ***********.

** **** ** **** signage ** *** ** these ***** ******* *** employees ** **** *** doors ****** ****** ****! Can *** ******* ***** told, ***** ******* **, that *** **** **** turn ******, **** **** door *** **** ** closed ****** ***? *** can ******* *** **** that ***** ***.

** ******* ****** ******* doesn't **** *** ** our ***** ****, *******, they **** ****** **** such ********, *** ****** the ****** ******** ** start ******* **** ****** like *** ***** ** the *** ** *** Poltergeist *****.

* ******* * "******" facility ** *******. **** employ **** ********** *** Man-Traps ** ********* *********. They *** ********** * nuisance ** *** ********* who ** ********** ******** to ********** ****, ********** when **** **** ********* their ********** *** **** it ****. * **** even **** *** ****** cramped **** *** "****" of * ********* **** both ****** "*********" *******. It *** ** * real ****** ** ******* is ************* ****** ** a ***** ***** ** other ******* ******.

********** ******* ** ****** the *****. *** *** only ******* *** ******** the ******** *****. ** is **** ***** ************** to ****** ** ** used ********!

Read this IPVM report for free.

This article is part of IPVM's 6,534 reports, 880 tests and is only available to members. To get a one-time preview of our work, enter your work email to access the full article.

Already a member? Login here | Join now

Related Reports

Keypads For Access Control Tutorial on Jul 28, 2020
Keypad readers present huge risks to even the best access systems. If...
Exit Devices For Access Control Tutorial on Aug 25, 2020
Exit Devices, also called 'Panic Bars' or 'Crash Bars' are required by safety...
Drain Wire For Access Control Reader Tutorial on Sep 23, 2020
An easy-to-miss cabling specification plays a key role in access control, yet...
The Insecure Verkada Access Control System on Jun 25, 2020
While Verkada touts the security of its system and that how their new door...
Door Fundamentals For Access Control Guide on Aug 24, 2020
Doors vary greatly in how difficult and costly it is to add electronic access...
Forced Door Alarms For Access Control Tutorial on Aug 17, 2020
One of the most important access control alarms is also often ignored....
HID Presents Mercury Security & Aero Access Controllers on Aug 25, 2020
HID presented Mercury Security & Aero Access Controllers at the 2020 IPVM...
Gait Recognition Examined on Sep 14, 2020
Facial recognition faces increasing ethical and political criticisms while...
Verkada Access Control Tested on Sep 09, 2020
Verkada raised $80 million earlier in 2020, expanding from video into access...
Faked Convergint Fever Camera 'Expert' Marketing on Jun 16, 2020
Convergint touts they are "THERMAL CAMERA SOLUTION EXPERTS" while faking...
AHJ / Authority Having Jurisdiction Tutorial on Aug 06, 2020
One of the most powerful yet often underappreciated characters in all...
HID Releases VertX Replacement Aero on Aug 10, 2020
HID is replacing two established and broadly supported types of access...
Verkada Falsely Claims "First Native Cloud-based Access Control and Video Security Solution" on Jun 18, 2020
Verkada's false claims continue, this time to be the first native cloud-based...
Risks Of Managing End User Passwords (Statistics) 2020 on Sep 11, 2020
Alarmingly, most integrators used spreadsheets to manage passwords, IPVM...
Network Cable Usage Statistics 2020 (Cat 5e vs Cat 6 vs Cat 6a) on Sep 02, 2020
Integrators are split between using Cat 5e, 6, and 6a but 2 of them have...

Recent Reports

OnTech Smart Services Partners With Google and Amazon To Compete With Integrators on Sep 25, 2020
A pain point for many homeowners to use consumer security and surveillance is...
The Future of Metalens For Video Surveillance Cameras - MIT / UMass / Immervision on Sep 25, 2020
Panoramic cameras using 'fisheye' lens have become commonplace in video...
Hikvision Sues Over Brazilian Airport Loss on Sep 24, 2020
Hikvision was excluded from a Brazilian airport project because it is owned...
China General Chamber of Commerce Calls Out US Politics on Sep 24, 2020
While US-China relations are at an all-time low, optimism about relations...
Verkada Disruptive Embedded Live Help on Sep 24, 2020
Call up your integrator? Have someone come by the next day? Verkada is...
IP Networking Course Fall 2020 - Last Chance - Register Now on Sep 23, 2020
Today is the last chance to register for the only IP networking course...
Drain Wire For Access Control Reader Tutorial on Sep 23, 2020
An easy-to-miss cabling specification plays a key role in access control, yet...
Norway Council of Ethics Finds Hikvision Human Rights Abuses "Ongoing" on Sep 23, 2020
Hikvision's involvement in "serious human rights abuse" in Xinjiang is...
IPVM Camera Calculator User Manual / Guide on Sep 23, 2020
Learn how to use the IPVM Camera Calculator (updated for Version 3.1). The...
Installation Course Fall 2020 - Save $50 - Last Chance on Sep 22, 2020
This is a unique installation course in a market where little practical...
SimpliSafe Business Security Launched Examined on Sep 22, 2020
SimpliSafe has launched "SimpliSafe Business Security" that the company...
FLIR CEO: Many New Fever Entrants "Making Claims That The Science Just Won't Support" on Sep 22, 2020
FLIR's CEO joins a growing number calling out risks with fever / screening...
China Bems Temperature Measurement Terminal Tested on Sep 22, 2020
Guangzhou Bems (brand Benshi) is the manufacturer behind temperature...
Axis Exports To China Police Criticized By Amnesty International on Sep 21, 2020
Axis Communications and other EU surveillance providers are under fire from...
Milestone XProtect on AWS Tested on Sep 21, 2020
Milestone finally launched multiple cloud solutions in 2020, taking a...