Tailgating - Access Control Tutorial

Author: Brian Rhodes, Published on Aug 25, 2016

Despite costing thousands of dollars per door, electronic access control systems are vulnerable to an easy exploit called 'tailgating'. Unless this threat is recognized and addressed, even a friendly gesture compromises one's security investment.

In this note, we take a look at 'tailgating', the most common causes / risks, and contrast 4 options to address / minimize tailgating:

  • 'Hold Open' Alarms
  • Turnstiles/Revolving Doors
  • Mantraps/Airlocks
  • Piggybacking Detectors/Analytics

******* ******* ********* ** ******* *** ****, ********** ****** ******* systems *** ********** ** ** **** ******* ****** '**********'. ****** this ****** ** ********** *** *********, **** * ******** ******* compromises ***'* ******** **********.

** **** ****, ** **** * **** ** '**********', *** most ****** ****** / *****, *** ******** * ******* ** address / ******** **********:

  • '**** ****' ******
  • **********/********* *****
  • ********/********
  • ************ *********/*********

[***************]

The *******

'**********', **** ****** '************' ** ****, ********* *** ********* **** a ************ ****** ***** * **** ******** *** ** **** individuals ** *********** **** ******* ***** *** **** ** ****. The ****** ** **** ****** ****** *** ****** ** ****** facility ********.

*** ********* *** ******** ***** **** ******* * **** **** for *******.  ** **** ******* ************, ********* **** ******* ** focused ** ********* ****** ** ******* ** **** ****. *****, but **** ***** ** ***, ** **** ******* ******* * malicious *** ** ********* ******** ****** * ***** **** ****** to **** *** ******** ******.

Common ******** *** ******* *****

** **** ********, ******* *** **** **** *** ****** ** a ****, **** **********. ********, ********** ******** *** **** **** behind *** *** ****** *** **** ******* ********* ** **-*******.

*** **** ****** ********** **** ** **** **** ********** ******* do *** ******** *** **** *** *********** ** ****** ******* system **** ***** *** '**** *******'. 

******, **** ******** ********** ** *** ******* * **** ***** circulate. ********* ******** ******** *** ******* ** ******** *** *******, like:

*******, *** ****** ***** ******** **** ** ********* ** **** the **** *** * **** ** ********** ** **** ** is ****** *** ******.

******** ********* ** ***

**** ****** ** *** ************ **** ** ********* ******** ******** of * **** ** ********, *** **** **** ** ********* just *** *********** ***** ** ******** ***** ******** *** **. 

*** **** ****** ** ******* '**********' **** '********' ** ****** awareness ** ***, ** **, * **** ** * ******** point. *** *** ******** *****, *** **** ***** ********** ****, are *********** **** ** *** ******** ****** ********** *********.  *** if * **** ** **** ****** *** ******, ** ** it ** ******** **** ******* ******* **** ******* ** *******, it ****** ***** ** **** **** *** ******** **** ****** after ********** *****.

*** ***** ********, **** ******** *** **** ******* ** ***** necessary ** ********* ********** ***** ** *** ******** **********. ******** people *** ******* ******* ** * '*** ****', *** ***** most ******* ********* *** ** ******* **** **** ****.

Other ************ *******

***** *** * ******* ** ***** ********** **** ******. ************* the '***' ** **** **** ********** ***** ** ********* *** best ******* ******* **:

  • Bad *******: Especially in rainy and cold climates, holding the door open offers a welcome shortcut to those seeking the warm and dry environment of a facility. In these cases, sheltered entries, **********, ** ******* **** ******** *** ******** ** **** **** doors *** ** ************* *********.
  • Misaligned/Worn *****: Over the course of thousands of open/close cycles, even commercial grade doors, hinges, frames and closers sag or become worn over time. If left unchecked, doors may not fully close when opened or may take a long time to close, therefore allowing many people entrance from a single card read. A regular and discipline door maintenance schedule for access controlled openings is critical to prevent the issue.
  • *************/********:***** *** * ******* ** ****** **** ** **** * door **** ******** ***** ** *** **** ******. *********, *****, bunched-up ****, *** ******** ********* *** *** ******** ******** ** eliminate *** **** ** ********** * ********** *** ******, ***** seen ** ******* ** *********. *** **** ******, ******** ************ 'smoking ****' ***** ** ******** ********* **** ******* *** ******** systems ** ******** ********* *** ******* ***** ************** ***** *** outside ******.
  • Malicious ******: Preventing untrusted or dangerous people from entering an area is often the primary goal of access control. Often, readers and locks alone are not enough to mitigate this risk despite the occurence being minor. To properly prevent undetected entry, often additional engineering controls like sensors, analytics, or even turnstiles are needed.

The ********

*** **** ** ********** ** ********** *** ****** ***** ****** controlled ******** ** **********. ***********, * **** ** *********** ******** are ********* ** ****** *** *******. ** *** ******* ***** we **** * **** ** *** ***** *****:

  • '**** ****' ******
  • **********/********* *****
  • ********/********
  • ************ *********/*********

'**** ****' ****** 

**** ****** ******* ******* **** *** ******* ** ******* **** contacts - ****** ******** **** ***** ******* * **** ** closed ** *** - *** *** ** *** ** ***** if * **** ** **** **** *** *** ****.  ******** occurs ** ***** **** ****** **** * *** *******, ******* indicating **** ******** ****** *** ******* ******* * '**** ****' door. *******, ***** **** ** * ***-**** ** **** ******* for ********** **********, ** **** ** *** ******* ****** ** nuisance ******** **** ***********. ****** * ******** ******** ******** *** access ******* ******, **** ******** ** ****** ** ** (********) dismissed ** ********** *** ***********.

********** ****** ****** ******* **** ******* $*** - $*,*** ******* many ****** ******* ******* *** ** ********** ** ***** * local ***** *** ****** ****** *** **** ******** ******** ** a '****' ************* *******.

**********/********* *****

** ****** *****, ********** **** ***** **** *******, ***** ********** devices ** *******, *****, *************** ****** ****** ******* ******. **** type ** ********* ********* ***** ** * ****** ****** ** a ****, *** ********** *** ******* ** **** * **** open *** ************ ******.

*** *********** ***** ***** ******** ** ******* ** ** '****** turnstile' ******** ** ******** ****** **** ** ******** *****, *** features '**********' *********:

** ******* **** ********** **** ** *** **** **** ********* (*****) ****.

*** **** ** ********** *** ********* ***** *** ***** **** $1,000 ** $**,***+ *** *** ********** **** ****** ********, *** retrofitted *************. *** ****, *** *** ********** *****.

********/ ********

***** ************* *** ********* **** ******* *** **** ** ********** doors. ******* ***** **** ***** ****** *** *** ********, *** doors *** ********** ** **** *** *** ** * ****. This ***** *** ******** *** ****** ** ****** ***** *** exterior *** *** **** ****** *** ** ******. ******* *** physical ***** ****** * ******* ** *****, **** *** ****** per **** **** ** ********* ******* *** *****. ******** *** be ********** *** ********** ******, ** ***** ** *** ******* below, ***** ** ********** **** ** ******** **** **** * wheelchair-credentialed **** ***** ** ** * ****:

***** ************* **** * ******* ** ********* **** ****** ********; in **** ***** *** ******** ** ******** ** ********* '***** room' ************ **** ******* *************, ** **** *** **** ** inspection *********** *** **********. ***** ************* *** ***********, *** ******* they *** ******** **** ** ***** *** **** ***** ******** footprints, **** *** ***** *** **** ****** ****-********** ********.

*** **** ** ******** *** ******** *** ********* **** *********, routinely ******* **** **** $**,*** ** *********. **** ********** *** revolving *****, ***** ******** ********** *** **** ****** ********, *** retrofitted *************. *** ****, ***** *** ******** ******** ****.

************ *********/*********:

**** ******, ******* ***** ** ******* **** ** *** ***** of * ****, ** ****** ********-****** ************ *******, *** ********** to ****** ********** ******** ******* ** *******. *** ******** ******* of * ****** ********** ** ******** ******* *** ****** ******** measured ** ** *********** **** ** *******. ***** ** ******** anomalies (**: *** ******* ** ******** ** '******'), *** **** or ****** **** *****. ********* *** **** ****** ** ***** to ***** ** *****,

*** ******* ** *** ****-***** ********* ******** **** ** *** promo ***** *****:

*** **** ** ***** ********* ****, *** ********* ***** **** $300+ *** * ****** ******** (**** ******), ** a ****** '***** *******' ******.

Solving *** *******

***** ********* ******, *** '****' ****** ** ** ***** ****** to ******.

**** ******** ******** ***** **** ********** ****** **** ** ******** instructions *** ******* ** ****** ********** ******* ***** *** *****. Lacking *** ******* ** ************** **** ** ********* *** *****, the ************* (*** ********** *****) ** ********** ******.

 

** ***** ***** ***** ********** **** ** *********, *** *** of ********** *** ******* ** ******. *******, *** ** *** cost ** ***** *********, **** *** ***** **** **** *** expensive *** ******* *** *** **** ****** (*** ****-*********) ******* like ********* ********* ** ***** *********.

Comments (2)

** **** ** **** ** ******, **** ***** ** ** active *****. ** **** ********* *** *** *** ******* *** explained, *** * *** ****.

* ******** * ****** *** * ***** **** ********* ****/******** elements. ******** *** ******* ***** ** *** ***. **** **** had ****** ***** ** *** ***. ** *** * **** study ** **** *** ******* ** * *********/*********/** ********** ******. Due ** ** ***** **** *********** ****/*** * ****** ****** in *** ***** *****, *** ****** ***** **** ****** ******* lines, **** ****** ***** ***** *** **** ****** ****** ** watch ******. **** **** ****** ****** * ******** *** *** together ******* ** **** *****.

* ***** *** **** ******** *** **** ** ** **** some ***** *********** ** ***** ** **** *********. **** ******** guards ** ******* *** ********* ***** ** * ***** ********.

+

* **** ****** ** **** ********

Login to read this IPVM report.
Why do I need to log in?
IPVM conducts unique testing and research funded by member's payments enabling us to offer the most independent, accurate and in-depth information.

Related Reports

Access Control Course Winter 2018 on Jun 11, 2017
The Winter 2018 IPVM Access Control Course is now open; save $50 on early registration. IPVM offers the most comprehensive access control course...
RMR Integrator Importance Statistics on Jun 08, 2017
How do integrators feel about offering RMR / recurring revenue services? For many, their business revolves around RMR, while others see no...
HID Edge EVO Tested on Jun 07, 2017
HID Edge controllers have been one of most common offerings in IP door controllers for years. The new generation is called Edge EVO. We tested...
Access Control AHJ Nightmares on Jun 01, 2017
For access control jobs, a single person can be the difference between finishing a job, costing thousands in extra dollars, and being profitable...
US States Security Licensing Guide on May 30, 2017
In the US, many states require integrators to be licensed to install burglar alarms, CCTV, electronic access control, or all three, and...
Anti-Hack Access Card Shields Tested on May 26, 2017
Keeping your access control card information secure is becoming a big priority, especially since cheaper copiers can hack details easily. Multiple...
Hackable 125kHz Access Control Migration Guide on May 19, 2017
Despite being one of the most popular credentials, 125 kHz credentials are easily copied and insecure as we showed in our test results, video...
Selling and Valuing Security Integrators on May 12, 2017
This ia a tutorial in how to (1) determine your security integrator's value and (2) to sell your security integrator. If you own an integrator,...
Smartphone Controlled Kevo Lock Tested on May 04, 2017
Smartlocks are a growing market, with millions sold. Kwikset's Kevo is one of the most common choices, using the Unikey smart phone access control...
Duress Codes For Alarms Systems on May 02, 2017
An alarm system can call for help in the event of an attempted break in, but only if it is armed. If an adversary forces an authorized user to...

Most Recent Industry Reports

Importance of Sales To Integrators - Statistics on Jun 23, 2017
One of the top trends in the industry over the past few years has been the rise of across-the-board sales (e.g.: Hikvision Sales, Dahua Sale,...
Deep Learning Surveillance Startups Deep Problem on Jun 23, 2017
The undeniably good news for the video surveillance market is that we are seeing the rise of more startups than in many years. The cause of this...
Avigilon Announces RADAR-Based Presence Detector on Jun 22, 2017
RADAR is gaining momentum within physical security. Two months after Axis announced a network radar detector, Avigilon has announced a RADAR-Based...
Covert Cloud Camera Service Launching (KJB) on Jun 22, 2017
Cloud IP cameras, for consumers, has become increasingly commonplace. However, covert cameras, lag there, with few options. Now, North America's...
Manufacturers Shipping Unlicensed H.265 Products on Jun 22, 2017
While H.265 support in video surveillance is growing, IPVM's research shows that most surveillance manufacturers are shipping H.265 products with...
Uniview Low-Cost Bullet PTZ Tested on Jun 21, 2017
Uniview is offering a HD zoom bullet camera, the IPC742SR9-PZ30-32G, with an integrated pan / tilt positioner, for the price of a low-cost...
QSR Video Surveillance Best Practices on Jun 21, 2017
Fast food restaurants or QSRs (quick service restaurants), are frequent victims of crime and fraud. Because they are open late, deal with cash, and...
45 Drives 'Lowest Cost' Enterprise Storage Company Profile on Jun 21, 2017
45 Drives claims the "lowest cost per Hard Drive Slot in the industry." But who or what is '45 Drives'? What started as a product design to...
No Hack, Still Liable, Court Finds ADT on Jun 20, 2017
Recently, ADT has been in the news for a $16 million settlement for a cyber security vulnerability class action suit. One of the most important...
Resolver / PPM 2000 Incident Management Platform Profile on Jun 20, 2017
You might have seen the company whose employees wear hockey jerseys at trade shows and wondered "what do they do?" PPM 2000 has been active in...

The world's leading video surveillance information source, IPVM provides the best reporting, testing and training for 10,000+ members globally. Dedicated to independent and objective information, we uniquely refuse any and all advertisements, sponsorship and consulting from manufacturers.

About | FAQ | Contact