Tailgating
Data ProtectionDefinition
Physical security breach where unauthorized personnel follow authorized users into restricted areas.
Technical Details
Tailgating is a physical security breach that occurs when an unauthorized individual gains access to a restricted area by following an authorized person, often without the authorized person's knowledge. This can happen in environments where access control systems, such as key cards or biometric scanners, are in place. The attacker capitalizes on the trust and social engineering aspects of human behavior, bypassing technological security measures. Effective prevention requires a combination of physical access controls, awareness training, and monitoring systems.
Practical Usage
In real-world scenarios, organizations implement security protocols to mitigate the risk of tailgating. This can include training employees to be vigilant about who is following them into secured areas, installing turnstiles or mantraps that prevent multiple individuals from entering with a single access credential, and utilizing surveillance cameras to monitor access points. Regular audits and security drills can also help reinforce the importance of physical security.
Examples
- An employee enters a secured office building using their key card. An unauthorized individual follows closely behind, taking advantage of the employee's access without needing their own access credentials.
- In a data center, an attacker observes an employee swipe their access card and then quickly follows them through the door before it closes, gaining entry to sensitive equipment and data.
- At a corporate event, an individual without a badge walks behind a group of attendees entering a restricted area, blending in and avoiding detection as they gain access to sensitive discussions.