Tailgating: Access Control Tutorial

Published Oct 31, 2019 14:54 PM

Nearly all access control systems are vulnerable to an easy exploit called 'tailgating'. Indeed, a friendly gesture in holding doors for others often compromises access security.

IPVM Image

** **** ****, ** **** * look ** '**********', *** **** ****** causes, *** ******** * ******* ** address/minimize **********:

  • '**** ****' ******
  • **********/********* *****
  • ********/********
  • ************ *********/*********
  • ******* & *********

The *******

'**********', **** ****** '************', ********* *** situation **** * ************ ****** **** opens * **** ******** *** ** more *********** ** *********** **** ******* while *** **** ** ****.

*** ********* *** ******** ***** **** holding * **** **** *** *******. It **** ******* ************, ********* **** someone ** ******* ** ********* ****** it ******* ** **** ****.

****, *** **** ***** ** ***, is **** ******* ******* * ********* act ** ********* ******** ****** * valid ********** ** **** *** ******** system. **********'* ****** *** ****** ** entire ******** ********.

Common ******** *** ******* *****

** **** ********, ******* *** **** open *** ****** ** * ****, kind **********. ********, ********** ******** *** door **** ****** *** ** ********* as ****, *** *** ****** *** will ******* ********* ** **-*******.

*******, **** ****** ** *** ******** how **** *** *********** ** ****** control ****** **** ***** *** '**** manners'.

IPVM Image

******, **** ******** ********** ** *** holding * **** ***** *********. ********* articles ******** *** ******* ** ******** are *******, ****:

*******, *** ****** ***** ******** **** to ********* ** ***** *** **** secure *** ********** **** ****** *** locked.

Security ********* ** ***

**** ****** ** *** ************ **** to ********* *** ******** ******** ** a **** ** ********, *** **** fail ** ********* *** ***** ***** behavior *** **.

*** **** ****** ** ******* '**********' with '********' ** ********** ********* ** why, ** **, * **** ** a ******** *****. *** *** ******** doors, *** **** ***** ********** ****, are *********** **** ** *** ******** access ********** *********. *** ** * door ** **** ****** *** ******, or ** ** ** ******** **** access ******* **** ******* ** *******, it ****** ***** ** **** **** and ******** **** ****** ***** ********** entry.

*** ***** ********, **** ******** *** door ******* ** ********* ** ********* security **********. ******** ****** *** ******* signage ** '*** ****', *** ***** effective *** ** ******* **** **** risk.

IPVM Image

Other ************ *******

***** *** * ******* ** ***** tailgating **** ******. ************* *** '***' of **** **** ********** ***** ** determine *** **** ******* ******* **:

  • Bad *******: Especially in rainy and cold climates, holding the door open offers a welcome shortcut to those seeking the warm and dry environment of a facility. In these cases, sheltered entries, **********, ** ******* **** ******** *** tendency ** **** **** ***** *** of ************* *********.
  • Misaligned/Worn *****: Over the course of thousands of open/close cycles, even commercial grade doors, hinges, frames, and closers sag or become worn over time. If left unchecked, doors may not fully close when opened or may take a long time to close, therefore allowing many people entrance from a single card read. A regular and discipline door maintenance schedule for access-controlled openings is critical to prevent the issue.
  • *************/********:***** *** * ******* ** ****** ways ** **** * **** **** latching ***** ** *** **** ******. Doorstops, *****, *******-** ****, *** ******** tampering *** *** ******** ******** ** eliminate *** **** ** ********** * credential *** ******, ***** **** ** onerous ** *********. *** **** ******, consider ************ '******* ****' ***** ** delivery ********* **** ******* *** ******** systems ** ******** ********* *** ******* other ************** ***** *** ******* ******.
  • Malicious ******: Preventing untrusted or dangerous people from entering an area is often the primary goal of access control. Often, readers and locks alone are not enough to mitigate this risk despite the occurrence being minor. To properly prevent undetected entry, often additional engineering controls like sensors, analytics, or even turnstiles are needed.

Tailgating *********

*** **** ** ********** ** ********** and ****** ***** ****** ********** ******** is **********. ***********, * **** ** engineering ******** *** ********* ** ****** the *******. ** *** ******* ***** we **** * **** ** *** major *****:

  • '**** ****' ******
  • **********/********* *****
  • ********/********
  • ************ *********/*********
  • ******* & *********

'Hold ****' ******

**** ****** ******* ******* **** *** ability ** *********** ******** ********- ****** ******** **** ***** ******* a **** ** ****** ** *** - *** *** ** *** ** alarm ** * **** ** **** open *** *** ****.

******** ****** ** ***** **** ****** than * *** *******, ******* ********** that ******** ****** *** **** ** pass ******* * '**** ****' ****. However, ***** **** ** * ***-**** or **** ******* *** ********** **********, it **** ** *** ******* ****** of ******** ******** **** ***********. ****** a ******** ******** ******** *** ****** control ******, **** ******** ** ****** to ** (********) ********* ** ********** and ***********.

********** ****** ****** ******* **** ******* $200 - $*** ******* **** ****** control ******* *** ** ********** ** sound * ***** ***** *** ****** beeper *** **** ******** ******** ** a '****' ************* *******.

Turnstiles/Revolving *****

** ****** *****, ********** **** ***** from *******, ***** ********** ******* ** sleeker, *****, *************** ****** ****** ******* points. **** **** ** ********* ********* entry ** * ****** ****** ** a **** *** ********** *** ******* to **** * **** **** *** unauthorized ******.

*** *********** ***** ***** ******** ** example ** ** '****** *********' ******** to ******** ****** **** ** ******** space, *** ******** '**********' *********:

** ******* **** ********** **** ** our**** **** ********* (*****)****.

*** **** ** ********** *** ********* doors *** ***** **** $*,*** ** $25,000+ *** *** ********** **** ****** features, *** *********** *************. *** ****, see ************* *****.

Mantraps/ ********

***** ************* *** ********* **** ******* two **** ** ********** *****. ******* sized **** ***** ****** *** *** occupant, *** ***** *** ********** ** open *** *** ** * ****.

**** ***** *** ******** *** ****** be ****** ***** *** ******** *** has **** ****** *** ** ******. Because *** ******** ***** ****** * mantrap ** *****, **** *** ****** per **** **** ** ********* ******* the *****.

IPVM Image

***** ************* **** * ******* ** operation **** ****** ********; ** **** cases, *** ******** ** ******** ** segregate '***** ****' ************ **** ******* contamination, ** **** *** **** ** inspection *********** *** **********. ***** ************* are *********, ***** ******* $**,*** ** more, *** ******* **** *** ******** sets ** ***** *** **** ***** physical **********, **** *** ***** *** most ****** ****-********** ********.

*** ****, *** ********* ******* ******** *****.

Piggybacking *********/*********

**** ******, ******* ***** ** ******* hung ** *** ***** ** * door, ** * ***** ***, ** nearby ********-****** ************ *******, *** ********** to ****** ********** ******** ******* ** opening. *** ******** ******* ** * single ********** ** ******** ******* *** actual ******** ******** ** ** *********** into ** *******.

** ******* *** *****-***** ****** ******-********** *******: ************ ******* ******** ***** ** **** entering * ****:

*** ******* ** *** ****-***** ********* detector **** ** *** ***** ***** below:

** **** ****** * ***** ****** app ******** **** ******* ****** **** overhead ** ******* ******** ********* ****.

*** **** ** ***** ********* **** but ********* ***** **** ~$*** *** a ****** ******** (**** ******), ** $3,000+ *** * ****** **** ********* mat ** '***** *******' ******.

Anti-Tailgating ********* ******

***** ********* ******, *** '****' ****** is * ***** ****** ** ******.

**** ******** ******** ***** **** ********** simply **** ** ******** ************ *** signage ** ****** ********** ******* ***** the *****. ******* *** ******* ** organizational **** ** ********* *** *****, the ************* (*** ********** *****) ** tailgating ******.

** **** *****, ****** **** **** signs *** ********* *** ********* ** deal **** *** *****, *** **** can ** **** ** **** ******:

IPVM Image

** ***** ***** ***** ********** **** be *********, *** *** ** ********** and ******* ** ******. *******, *** to *** **** ** ***** *********, many *** ***** **** **** *** expensive *** ******* *** *** **** costly (*** ****-*********) ******* **** ********* Detection ** ***** *********.

Comments (16)
JE
Jeremy Ellis
Oct 31, 2019

**** **** **** ** **** ********* means.

Avatar
Brian Rhodes
Oct 31, 2019
IPVMU Certified

* ******** ***********-************* **** ******* *********** **** ***** shared, *** ******** ****** ******** ******* an ****** ****.

(8)
SD
Shannon Davis
Oct 31, 2019
IPVMU Certified

*** **** *** ** ******* ********** in ** ****** ********** ***********, *** the ********* ****, ** ** *** areas ****** *** ******. ** *** employee *****'* **** **** *** ********* door ***** *****, *** *** ********* area, **** *** ****** *** ** setup ** *** ***** ***** **** the **** ****, *** ******** ****, which ****** *** ******** ** ****** protocol ******. *** ***% ********* ****** and ******** **** ****** *** ******* up ***** ** ***** *** *** convoluted ******* ** * ***** ******. This *******, *****'* **** **** ******* people ** *** ** *** **** to *********** ** ****** ** *** site *** **** **** **** ****** sure ********* **** **** *** ******** so ****** *** ** ******* *** reporting ********.

* **** **** **** **** **** the ***** ** ******* ************ ******* from ******** *** ******** ** ********** as ***** ** * ****** ******* because *** ***'* ****** **** *** is ** ******** *** *** ** not *** **** *** *** **** likely ** **** *** **** **** for ******* ****.

***** *** **** ***** *** **** help.

(2)
U
Undisclosed #1
Oct 31, 2019

*** **** *** ** ******* ********** in ** ****** ********** ***********, *** the ********* ****, ** ** *** areas ****** *** ******. ** *** employee *****'* **** **** *** ********* door ***** *****, *** *** ********* area, **** *** ****** *** ** setup ** *** ***** ***** **** the **** ****, *** ******** ****, which ****** *** ******** ** ****** protocol ******. *** ***% ********* ****** and ******** **** ****** *** ******* up ***** ** ***** *** *** convoluted ******* ** * ***** ******.

***** ** *** ******* **** ******** this ********. ************* ** ********: ******** spaces ********** **** **** ********** ***********. This ** ***** *** ** ********* leaving ***** ****** ** ***** *****, or ******** **** ***** ********* ********* where **** *** **** ****** **** their **********. ***** *** *** **** a ******* *** ********* **** ********, you ********** ** *** **** ***** near *** ******** *****.

(1)
U
Undisclosed #1
Oct 31, 2019

***********, * **** ****** **** * corporate ******** **** **** ********* ** resolve ********** ******* *******, *** * high ***** ** **************. **** *** driven ******* ******** ********** ** *** security ****: ********** **** ********* **********, holding ********* *********** ** **** *** someone **** **, *** ******** *********** people ** *** ******** *** *** not *** * ****.

*** ***** ******** ****** *** ******* were *** ****, ** **** *** using ********** ** *****, ******** ** place, *** **** *** ***** ******** most ******** ***** ****.

*** ******* ** ************** **** ***** 2 ***** ***** ** *** ********* stopping *********, ****** **** ** ***** their *****. * ****-****** ******, ***** Security *** *** ******* *** ****** thanking ********* *** ***** *********. *** it ***** **?

** ******* ***** ** *** ******** other **** ******** ************** ****** ****** the **** ****.

*** **** *** ** ******* **** is ******* **** ******* ** *******, and **********. *** **** ********* ** the ***** *** ******* ** *** don't **** ******* *** **********. **** then, *** **** ************ ******** ** that ********** ** **********.

(4)
Avatar
Carter Maslan
Nov 02, 2019
Camio

*********** #*, *** * **** **** you *** ** *******?

*'* ****** ********** ******** **** ***** the ********* ** **** *******. *'*******@*****.****** **** ******* * ***** ***** chat ** **** ******** ** ** with ***?

UE
Undisclosed End User #2
Oct 31, 2019

** **** ****** ***, *** ** Boon **** ******** ******** ******* ** all ********* ***** ****** *** ****** areas. *** ****** ** * **** with ****** **********, *** * *** expensive *** ** ****** *** *******.

UM
Undisclosed Manufacturer #3
Nov 01, 2019

*** ***** ***** **** ***** ****'* perfect, *** *** ****** *** ****** walking ******* ** ******* **** ***** gate *********. *** *** **** ******* I ****, ***** ** ** ****** gates ****'* **** **** *** *** marketing ********!

**** ****** ***** *** **** ******** sensors *** *** ****** *** ******* some ******** ************ ***** **** *** detect * ***** ** *** ****** and ** ***** ** ***** *****. You **** **** *** ****** *** this **** ** ********* ** ***** deep **** ** *** ******* *** have * *********** ******** *****.

**** ***** ****, ********* ***** *'** seen ****** ******* ******** ********** **** one ******, ***** ** ***** ***** with **** ******. ** ** ***** nobody ** ***** ****.

U
Undisclosed #4
Nov 02, 2019
IPVMU Certified

'**********', **** ****** '************'...

************ ** *** ***-*********, ********** **** of **********, ****.

(4)
(1)
(1)
UE
Undisclosed End User #5
Nov 03, 2019

******* ***** ** *** ** *** facility, ******* **********, ** *** **** wind! *** ** *** ****** ** our **************, ** ******** ****** ** 15 *** ** *******, *** ******** 25% ** *** ***** **** *** stuck ****, **** *** ****-******* ****** to ******** *** *** ******** ***********.

** **** ** **** ******* ** all ** ***** ***** ******* *** employees ** **** *** ***** ****** behind ****! *** *** ******* ***** told, ***** ******* **, **** *** must **** **** ******, **** **** door *** **** ** ****** ****** you? *** *** ******* *** **** that ***** ***.

** ******* ****** ******* *****'* **** any ** *** ***** ****, *******, they **** ****** **** **** ********, you ****** *** ****** ******** ** start ******* **** ****** **** *** house ** *** *** ** *** Poltergeist *****.

RW
Robert Winslow
Nov 04, 2019

* ******* * "******" ******** ** Houston. **** ****** **** ********** *** Man-Traps ** ********* *********. **** *** considered * ******** ** *** ********* who ** ********** ******** ** ********** them, ********** **** **** **** ********* their ********** *** **** ** ****. I **** **** **** *** ****** cramped **** *** "****" ** * turnstile **** **** ****** "*********" *******. It *** ** * **** ****** if ******* ** ************* ****** ** a ***** ***** ** ***** ******* object.

********** ******* ** ****** *** *****. You *** **** ******* *** ******** the ******** *****. ** ** **** their ************** ** ****** ** ** used ********!

Avatar
Ng Choy Mei
Oct 01, 2020
IPVMU Certified

********* *** ********* ** ******* ****, it ***** ** ****** ** **** the **** **** ****** **** *** irritating ***** ** *****.

CH
Charng Haw Guo
Oct 26, 2020
IPVMU Certified

**** ** **** ** ** ******** of ****** *********.

JS
Jason Stayton
Sep 27, 2021
IPVMU Certified

********* **** ***** ** **** **** reading **** ******* ** ***** **** handicap *********. * *** * *** of ****** *** **** *** **** but ***'* ******** **** ** *** them. **** **** ***** ** *** after **** *****, **** **** ******* the **** ** **** **** *** 10 ******* ****** ****.

BH
Brad Hill
Nov 25, 2021

***** ***** *** **** ****.

DR
David Rasmussen
Mar 17, 2022
IPVMU Certified

**********/************, ****** ********* ******* **** *** of **********, **, *** ****** **** be, * ********* *****. ****** *** technology ** ***** *** **** ******* for ********* ****** ** ******* **********. However, ** ** ********* ** ********** that *** ******* **** ** ** brought **** *** ************. ********* * section ** ******* ****** *** ******** practices ** * *** **** *********** is *** ** ******** *** ** and **** ********** **** ** ******** the ******** ** ****. ********** ************* is **** *** ** ******* ******* it ** ***** ******* ****** ******** or ******* ********. *'** ***** **** the **** **** ** ******* **********, though ********* *** ** ***** ** quite * *** ** **** ****** is *** *********. *** ***** **** well, *******, **** *** **** *********** to ***** ******* *** ** ******* size ** ********. ** ** ******** experience **** ****-********** *******, **** *** passive ******* *** ***** *** ******* after **** ** ********* ******* ***** is ** ******** *******. **** *** also ********* **** ** ********* *** may ******* ***** ***** ** *** at ***.