Tailgating - Access Control Tutorial

Author: Brian Rhodes, Published on Aug 25, 2016

Despite costing thousands of dollars per door, electronic access control systems are vulnerable to an easy exploit called 'tailgating'. Unless this threat is recognized and addressed, even a friendly gesture compromises one's security investment.

In this note, we take a look at 'tailgating', the most common causes / risks, and contrast 4 options to address / minimize tailgating:

  • 'Hold Open' Alarms
  • Turnstiles/Revolving Doors
  • Mantraps/Airlocks
  • Piggybacking Detectors/Analytics

******* ******* ********* ** ******* *** ****, ********** ****** ******* systems *** ********** ** ** **** ******* ****** '**********'. ****** this ****** ** ********** *** *********, **** * ******** ******* compromises ***'* ******** **********.

** **** ****, ** **** * **** ** '**********', *** most ****** ****** / *****, *** ******** * ******* ** address / ******** **********:

  • '**** ****' ******
  • **********/********* *****
  • ********/********
  • ************ *********/*********

[***************]

The *******

'**********', **** ****** '************' ** ****, ********* *** ********* **** a ************ ****** ***** * **** ******** *** ** **** individuals ** *********** **** ******* ***** *** **** ** ****. The ****** ** **** ****** ****** *** ****** ** ****** facility ********.

*** ********* *** ******** ***** **** ******* * **** **** for *******.  ** **** ******* ************, ********* **** ******* ** focused ** ********* ****** ** ******* ** **** ****. *****, but **** ***** ** ***, ** **** ******* ******* * malicious *** ** ********* ******** ****** * ***** **** ****** to **** *** ******** ******.

Common ******** *** ******* *****

** **** ********, ******* *** **** **** *** ****** ** a ****, **** **********. ********, ********** ******** *** **** **** behind *** *** ****** *** **** ******* ********* ** **-*******.

*** **** ****** ********** **** ** **** **** ********** ******* do *** ******** *** **** *** *********** ** ****** ******* system **** ***** *** '**** *******'. 

******, **** ******** ********** ** *** ******* * **** ***** circulate. ********* ******** ******** *** ******* ** ******** *** *******, like:

*******, *** ****** ***** ******** **** ** ********* ** **** the **** *** * **** ** ********** ** **** ** is ****** *** ******.

******** ********* ** ***

**** ****** ** *** ************ **** ** ********* ******** ******** of * **** ** ********, *** **** **** ** ********* just *** *********** ***** ** ******** ***** ******** *** **. 

*** **** ****** ** ******* '**********' **** '********' ** ****** awareness ** ***, ** **, * **** ** * ******** point. *** *** ******** *****, *** **** ***** ********** ****, are *********** **** ** *** ******** ****** ********** *********.  *** if * **** ** **** ****** *** ******, ** ** it ** ******** **** ******* ******* **** ******* ** *******, it ****** ***** ** **** **** *** ******** **** ****** after ********** *****.

*** ***** ********, **** ******** *** **** ******* ** ***** necessary ** ********* ********** ***** ** *** ******** **********. ******** people *** ******* ******* ** * '*** ****', *** ***** most ******* ********* *** ** ******* **** **** ****.

Other ************ *******

***** *** * ******* ** ***** ********** **** ******. ************* the '***' ** **** **** ********** ***** ** ********* *** best ******* ******* **:

  • Bad *******: Especially in rainy and cold climates, holding the door open offers a welcome shortcut to those seeking the warm and dry environment of a facility. In these cases, sheltered entries, **********, ** ******* **** ******** *** ******** ** **** **** doors *** ** ************* *********.
  • Misaligned/Worn *****: Over the course of thousands of open/close cycles, even commercial grade doors, hinges, frames and closers sag or become worn over time. If left unchecked, doors may not fully close when opened or may take a long time to close, therefore allowing many people entrance from a single card read. A regular and discipline door maintenance schedule for access controlled openings is critical to prevent the issue.
  • *************/********:***** *** * ******* ** ****** **** ** **** * door **** ******** ***** ** *** **** ******. *********, *****, bunched-up ****, *** ******** ********* *** *** ******** ******** ** eliminate *** **** ** ********** * ********** *** ******, ***** seen ** ******* ** *********. *** **** ******, ******** ************ 'smoking ****' ***** ** ******** ********* **** ******* *** ******** systems ** ******** ********* *** ******* ***** ************** ***** *** outside ******.
  • Malicious ******: Preventing untrusted or dangerous people from entering an area is often the primary goal of access control. Often, readers and locks alone are not enough to mitigate this risk despite the occurence being minor. To properly prevent undetected entry, often additional engineering controls like sensors, analytics, or even turnstiles are needed.

The ********

*** **** ** ********** ** ********** *** ****** ***** ****** controlled ******** ** **********. ***********, * **** ** *********** ******** are ********* ** ****** *** *******. ** *** ******* ***** we **** * **** ** *** ***** *****:

  • '**** ****' ******
  • **********/********* *****
  • ********/********
  • ************ *********/*********

'**** ****' ****** 

**** ****** ******* ******* **** *** ******* ** ******* **** contacts - ****** ******** **** ***** ******* * **** ** closed ** *** - *** *** ** *** ** ***** if * **** ** **** **** *** *** ****.  ******** occurs ** ***** **** ****** **** * *** *******, ******* indicating **** ******** ****** *** ******* ******* * '**** ****' door. *******, ***** **** ** * ***-**** ** **** ******* for ********** **********, ** **** ** *** ******* ****** ** nuisance ******** **** ***********. ****** * ******** ******** ******** *** access ******* ******, **** ******** ** ****** ** ** (********) dismissed ** ********** *** ***********.

********** ****** ****** ******* **** ******* $*** - $*,*** ******* many ****** ******* ******* *** ** ********** ** ***** * local ***** *** ****** ****** *** **** ******** ******** ** a '****' ************* *******.

**********/********* *****

** ****** *****, ********** **** ***** **** *******, ***** ********** devices ** *******, *****, *************** ****** ****** ******* ******. **** type ** ********* ********* ***** ** * ****** ****** ** a ****, *** ********** *** ******* ** **** * **** open *** ************ ******.

*** *********** ***** ***** ******** ** ******* ** ** '****** turnstile' ******** ** ******** ****** **** ** ******** *****, *** features '**********' *********:

** ******* **** ********** **** ** *** **** **** ********* (*****) ****.

*** **** ** ********** *** ********* ***** *** ***** **** $1,000 ** $**,***+ *** *** ********** **** ****** ********, *** retrofitted *************. *** ****, *** *** ********** *****.

********/ ********

***** ************* *** ********* **** ******* *** **** ** ********** doors. ******* ***** **** ***** ****** *** *** ********, *** doors *** ********** ** **** *** *** ** * ****. This ***** *** ******** *** ****** ** ****** ***** *** exterior *** *** **** ****** *** ** ******. ******* *** physical ***** ****** * ******* ** *****, **** *** ****** per **** **** ** ********* ******* *** *****. ******** *** be ********** *** ********** ******, ** ***** ** *** ******* below, ***** ** ********** **** ** ******** **** **** * wheelchair-credentialed **** ***** ** ** * ****:

***** ************* **** * ******* ** ********* **** ****** ********; in **** ***** *** ******** ** ******** ** ********* '***** room' ************ **** ******* *************, ** **** *** **** ** inspection *********** *** **********. ***** ************* *** ***********, *** ******* they *** ******** **** ** ***** *** **** ***** ******** footprints, **** *** ***** *** **** ****** ****-********** ********.

*** **** ** ******** *** ******** *** ********* **** *********, routinely ******* **** **** $**,*** ** *********. **** ********** *** revolving *****, ***** ******** ********** *** **** ****** ********, *** retrofitted *************. *** ****, ***** *** ******** ******** ****.

************ *********/*********:

**** ******, ******* ***** ** ******* **** ** *** ***** of * ****, ** ****** ********-****** ************ *******, *** ********** to ****** ********** ******** ******* ** *******. *** ******** ******* of * ****** ********** ** ******** ******* *** ****** ******** measured ** ** *********** **** ** *******. ***** ** ******** anomalies (**: *** ******* ** ******** ** '******'), *** **** or ****** **** *****. ********* *** **** ****** ** ***** to ***** ** *****,

*** ******* ** *** ****-***** ********* ******** **** ** *** promo ***** *****:

*** **** ** ***** ********* ****, *** ********* ***** **** $300+ *** * ****** ******** (**** ******), ** a ****** '***** *******' ******.

Solving *** *******

***** ********* ******, *** '****' ****** ** ** ***** ****** to ******.

**** ******** ******** ***** **** ********** ****** **** ** ******** instructions *** ******* ** ****** ********** ******* ***** *** *****. Lacking *** ******* ** ************** **** ** ********* *** *****, the ************* (*** ********** *****) ** ********** ******.

 

** ***** ***** ***** ********** **** ** *********, *** *** of ********** *** ******* ** ******. *******, *** ** *** cost ** ***** *********, **** *** ***** **** **** *** expensive *** ******* *** *** **** ****** (*** ****-*********) ******* like ********* ********* ** ***** *********.

Comments (2)

** **** ** **** ** ******, **** ***** ** ** active *****. ** **** ********* *** *** *** ******* *** explained, *** * *** ****.

* ******** * ****** *** * ***** **** ********* ****/******** elements. ******** *** ******* ***** ** *** ***. **** **** had ****** ***** ** *** ***. ** *** * **** study ** **** *** ******* ** * *********/*********/** ********** ******. Due ** ** ***** **** *********** ****/*** * ****** ****** in *** ***** *****, *** ****** ***** **** ****** ******* lines, **** ****** ***** ***** *** **** ****** ****** ** watch ******. **** **** ****** ****** * ******** *** *** together ******* ** **** *****.

* ***** *** **** ******** *** **** ** ** **** some ***** *********** ** ***** ** **** *********. **** ******** guards ** ******* *** ********* ***** ** * ***** ********.

+

* **** ****** ** **** ********

Login to read this IPVM report.
Why do I need to log in?
IPVM conducts unique testing and research funded by member's payments enabling us to offer the most independent, accurate and in-depth information.

Related Reports

PoE Powered Access Control Tutorial on Jan 19, 2018
Powering access control with Power over Ethernet is becoming increasingly common.  However, access requires more power than cameras, and the...
Multicasting Surveillance Tutorial on Jan 04, 2018
Network bandwidth can be a concern for some surveillance systems. While improvements in video codecs, such as smart codecs for H.264 and H.265,...
Access Control Course Winter 2018 on Jan 04, 2018
Learn more below about the Winter 2018 IPVM Access Control Course. Register here. IPVM offers the most comprehensive access control course in the...
Cabling Best Practices Guide on Jan 03, 2018
Surveillance cabling can be a major problem. Poorly installed and maintained networks are often costly, lengthy, frustrating ordeals to...
2018 Access Control Book Released on Jan 02, 2018
This is the best, most comprehensive access control book in the world, based on our unprecedented research and testing, significantly updated for...
QoS for Video Surveillance on Dec 29, 2017
Along with VLANs, QoS is one of the most misunderstood topics in IP surveillance networks. Many purported "experts" claim it is required in any...
Repositionable Multi-Imager Camera Guide on Dec 22, 2017
Multi-imager usage has been growing strongly over the past few years. Now, a new segment of multi-imagers has taken off, with many manufacturers...
STP vs UTP for Video Surveillance Tutorial on Dec 20, 2017
For many video system designers, deciding which ethernet cabling to use is a quick decision: go with the cheapest.  However, this overlooks the...
2018 Top Sales Interest For Integrators on Dec 20, 2017
130+ integrators answered: This is a key question, especially for manufacturers, as it impacts what areas to focus more on and what...
Lock Status Monitoring Tutorial on Dec 18, 2017
Just because your doors look secure does not mean they are. Unless access systems are using lock status monitoring, the doors and areas they...

Most Recent Industry Reports

PoE Powered Access Control Tutorial on Jan 19, 2018
Powering access control with Power over Ethernet is becoming increasingly common.  However, access requires more power than cameras, and the...
If You Have 4 Cameras, You Can Throw Them Away, If You Have 400, They Throw You Away on Jan 19, 2018
Do users care about anything but price? Do user care about cybersecurity? Do users care about trusting their supplier? These have become...
Chinese Government Hikvision Surveillance System On US Government Network on Jan 18, 2018
Hikvision, the Chinese government-owned manufacturer, has publicly claimed that their products are running on a US government network. Moreover,...
Winter 2018 Camera Course on Jan 18, 2018
Learn video surveillance and get certified. Register now. Save $50 on the course, ending this Thursday the 18th, plus get access to 2 class times...
VSaaS Usage Statistics 2018 on Jan 18, 2018
VSaaS has been a 'next big thing' for more than a decade. The prospect of managing, storing and streaming video from the cloud rather than...
Vivint Streety Video Strengthens Door Knocking on Jan 17, 2018
Vivint is famous (or infamous depending on your perspective) for mastering large scale door to door selling. The company has skyrocketed from a...
Axis: "It’s A Question Of Trust And Who You Want To Be Associated With" on Jan 17, 2018
Who do you trust? Who do you want to be associated with? Axis is raising hard questions to start 2018. In this note, we examine these questions,...
Software House Vulnerability Allows Inside Attacker To Open Doors on Jan 17, 2018
A vulnerability in Software House IP-ACM modules allows an attacker to potentially unlock doors, or perform other actions, on affected systems....
'Defiant' Hikvision 'Strikes Back' At WSJ And US on Jan 16, 2018
The fight is on. Hikvision and their owner, the Chinese government, 'strikes back' against the Wall Street Journal and US politicians raising...
The 2018 Surveillance Industry Guide on Jan 16, 2018
The 300 page, 2018 Video Surveillance Industry Guide, covering the key events and the future of the video surveillance market, is now available,...

The world's leading video surveillance information source, IPVM provides the best reporting, testing and training for 10,000+ members globally. Dedicated to independent and objective information, we uniquely refuse any and all advertisements, sponsorship and consulting from manufacturers.

About | FAQ | Contact