The Search for the Perfect Door - Deviant Ollam
•
1 recomendación•4,243 vistas
You have spent lots of money on a high-grade, pick-resistant, ANSI-rated lock for your door. Your vendor has assured you how it will resist attack and how difficult it would be for someone to copy your key. Maybe they’re right. But… the bulk of attacks that both penetration testers and also criminals attempt against doors have little or nothing to do with the lock itself! This talk will be a hard-hitting exploration (full of photo and video examples) of the ways in which your door — the most fundamental part of your physical security — can possibly be thwarted by someone attempting illicit entry. The scary problems will be immediately followed by simple solutions that are instantly implementable and usually very within-budget. You, too, can have a near-perfect door… if you’re willing to learn and understand the problems that all doors tend to have.
Recomendados
Recomendados
Más contenido relacionado
La actualidad más candente
La actualidad más candente (16)
Destacado
Destacado (18)
Similar a The Search for the Perfect Door - Deviant Ollam
Similar a The Search for the Perfect Door - Deviant Ollam (19)
Más de Shakacon
Más de Shakacon (20)
Último
Último (20)
The Search for the Perfect Door - Deviant Ollam
- 1. Physical Security: Ideal Doors & Padlocks Deviant Ollam ShakaCon – 2016/07/13
- 2. Who Am I?
- 6. Why Does Physical Security Matter ?
- 7. http://enterthecore.net Lots of Folk Are Discussing Network Security
- 8. http://enterthecore.net Lots of Folk Are Discussing Network Security Kemuri Water Company was responsible for supplying and metering water usage over a number of neighboring counties. From the onset, KWC was adamant that no evidence of unauthorized access had been uncovered. ... It became clear that KWC management was aware of potential unauthorized access into the OT systems of the water district.
- 9. http://enterthecore.net Lots of Folk Are Discussing Network Security Kemuri Water Company was responsible for supplying and metering water usage over a number of neighboring counties. From the onset, KWC was adamant that no evidence of unauthorized access had been uncovered. ... It became clear that KWC management was aware of potential unauthorized access into the OT systems of the water district. An unexplained pattern of valve and duct movements had occurred over the previous 60 days. These movements consisted of manipulating the PLCs that managed the amount of chemicals used to treat the water to make it safe to drink, as well as affecting the water flow rate, causing disruptions with water distribution.
- 10. http://enterthecore.net Lots of Folk Are Discussing Network Security Kemuri Water Company was responsible for supplying and metering water usage over a number of neighboring counties. An unexplained pattern of valve and duct movements had occurred over the previous 60 days. These movements consisted of manipulating the PLCs that managed the amount of chemicals used to treat the water to make it safe to drink, as well as affecting the water flow rate, causing disruptions with water distribution. Access to customer water usage, PII, and payment data required only a username and password. No second authentication factor was needed. Next, we found a direct cable connection between the application and the AS400 system. Making matters worse, the AS400 system had open access to the internet and its internal IP address and administrative credentials were found on the payment application webserver in clear text within an initialization file.
- 11. http://enterthecore.net Lots of Folk Are Discussing Network Security
- 12. http://enterthecore.net Lots of Folk Are Discussing Network Security
- 13. http://enterthecore.net But with a Physical Breach…
- 14. http://enterthecore.net All of your firewall rules…
- 15. http://enterthecore.net All of your firewall rules… can be compromised
- 16. http://enterthecore.net All your hard work here…
- 17. http://enterthecore.net All your hard work here… gets undermined here
- 18. http://enterthecore.net Hands-On Attacks are Possible On-Site
- 19. http://enterthecore.net Not To Mention… Outright Theft, Damage, and Tampering
- 20. http://enterthecore.net Not To Mention… Outright Theft, Damage, and Tampering
- 21. http://enterthecore.net Not To Mention… Outright Theft, Damage, and Tampering
- 22. What’s Wrong With Your Door?
- 23. The Lock?
- 27. http://enterthecore.net Lockpicking is a Topic for Later
- 28. The Hinges
- 31. http://enterthecore.net Security Hinges & Jamb Pin Screws
- 32. http://enterthecore.net Security Hinges & Jamb Pin Screws
- 33. http://enterthecore.net Security Hinges & Jamb Pin Screws
- 34. http://enterthecore.net Security Hinges & Jamb Pin Screws
- 35. http://enterthecore.net Security Hinges & Jamb Pin Screws
- 36. http://enterthecore.net Security Hinges & Jamb Pin Screws
- 37. The Latch
- 40. http://enterthecore.net Shrum Tools / Traveler Hooks
- 41. http://enterthecore.net Shrum Tools / Traveler Hooks
- 42. http://enterthecore.net Shrum Tools / Traveler Hooks
- 43. http://enterthecore.net Shrum Tools / Traveler Hooks
- 54. http://enterthecore.net Dead Latches Rely on Proper Door Fitment
- 69. Key Boxes
- 77. Edge Gaps
- 78. http://enterthecore.net Edge Gaps and Motion Sensors
- 79. http://enterthecore.net Edge Gaps and Motion Sensors
- 80. http://enterthecore.net Request-to-Exit (REX) Sensors Passive Infrared (PIR) Range Controlled Radar (RCR) Hybrid of Both
- 81. The Bottom Gap
- 82. http://enterthecore.net Modern Door Lever Style Handles
- 86. http://enterthecore.net Under Door Attack Prevention – Security Door Bottom
- 87. http://enterthecore.net Under Door Attack Prevention – Blocking Shroud
- 88. http://enterthecore.net Under Door Attack Prevention – Blocking Clips
- 89. http://enterthecore.net Under Door Attack Prevention – Blocking Clips
- 90. The Doorframe
- 97. http://enterthecore.net The Keyway & Plug
- 100. http://enterthecore.net The Latch (often two Latches)
- 101. Attacking The Latches… Shimming
- 105. http://enterthecore.net Single Latch or Dual Latch?
- 106. http://enterthecore.net Shim-Proof Padlocks… Double-Ball Mechanism
- 107. Attacking With Skeleton Keys
- 124. Attacking The Pin Stacks… Overlifting
- 126. http://enterthecore.net Overlifting Shouldn’t Be Possible
- 127. http://enterthecore.net Overlifting Shouldn’t Be Possible
- 128. http://enterthecore.net Overlifting Shouldn’t Be Possible
- 129. http://enterthecore.net Overlifting Shouldn’t Be Possible, But…
- 130. http://enterthecore.net Overlifting is Possible with Improperly Designed Locks
- 133. Attacking The Release or Cam… Bypassing
- 134. http://enterthecore.net Lock Bypassing – Master 175
- 135. http://enterthecore.net Lock Bypassing – Master 175
- 136. http://enterthecore.net Lock Bypassing – Master 175
- 137. http://enterthecore.net Lock Bypassing – Master 175
- 138. http://enterthecore.net Lock Bypassing – Master 175
- 139. http://enterthecore.net Lock Bypassing – Master 175
- 140. http://enterthecore.net Lock Bypassing – American Padlocks
- 141. http://enterthecore.net Lock Bypassing – American Padlocks
- 142. http://enterthecore.net Lock Bypassing – American Padlocks
- 143. http://enterthecore.net Lock Bypassing – American Padlocks
- 144. http://enterthecore.net Lock Bypassing – American Padlocks
- 145. http://enterthecore.net Lock Bypassing – American Padlocks
- 146. Where Do We Encounter These Padlocks? ?
- 147. http://enterthecore.net Are There Vulnerable Locks on Your Sites?
- 148. http://enterthecore.net Are There Vulnerable Locks on Your Sites?
- 149. http://enterthecore.net Are There Vulnerable Locks on Your Sites?
- 150. http://enterthecore.net Are There Vulnerable Locks on Your Sites?
- 151. http://enterthecore.net Are There Vulnerable Locks on Your Sites?
- 152. http://enterthecore.net Are There Vulnerable Locks on Your Sites?
- 153. http://enterthecore.net Are There Vulnerable Locks on Your Sites?
- 154. http://enterthecore.net Are There Vulnerable Locks on Your Sites?
- 155. http://enterthecore.net Are There Vulnerable Locks on Your Sites?
- 156. http://enterthecore.net Are There Vulnerable Locks on Your Sites?
- 157. http://enterthecore.net Are There Vulnerable Locks on Your Sites?
- 158. Thinking Critically About Your Doors, Too? ?
- 159. http://enterthecore.net A Door With Problems
- 160. http://enterthecore.net A Door With Problems
- 166. Threats Come From All Angles
- 172. In Conclusion
- 173. http://enterthecore.net Padlock Attacks and Mitigations
- 174. http://enterthecore.net Padlock Attacks and Mitigations component: latches attack: shimming mitigation: double ball / shim-proof mechanism
- 175. http://enterthecore.net Padlock Attacks and Mitigations component: latches attack: shimming mitigation: double ball / shim-proof mechanism component: warded key systems attack: skeleton keys mitigation: never use these for any reason
- 176. http://enterthecore.net Padlock Attacks and Mitigations component: latches attack: shimming mitigation: double ball / shim-proof mechanism component: warded key systems attack: skeleton keys mitigation: never use these for any reason component: pin stacks attack: overlifting with comb picks mitigation: proper fabrication dimensions
- 177. http://enterthecore.net Padlock Attacks and Mitigations component: latches attack: shimming mitigation: double ball / shim-proof mechanism component: warded key systems attack: skeleton keys mitigation: never use these for any reason component: pin stacks attack: overlifting with comb picks mitigation: proper fabrication dimensions component: release cam attack: bypassing mitigation: blocking elements or key-retaining systems immune to bypassing
- 178. http://enterthecore.net Padlock Attacks and Mitigations component: latches attack: shimming mitigation: double ball / shim-proof mechanism component: warded key systems attack: skeleton keys mitigation: never use these for any reason component: pin stacks attack: overlifting with comb picks mitigation: proper fabrication dimensions component: release cam attack: bypassing mitigation: blocking elements or key-retaining systems immune to bypassing
- 180. http://enterthecore.net Very Robust Padlocks - Abloy Protec
- 181. http://enterthecore.net Very Robust Padlocks - Abus 83/45
- 182. http://enterthecore.net Very Robust Padlocks - Abus 83/45
- 183. http://enterthecore.net Very Robust Padlocks - Abus 83/53
- 184. http://enterthecore.net Very Robust Padlocks - Abus 83/53
- 185. http://enterthecore.net Very Robust Padlocks - Abus 83/53
- 186. http://enterthecore.net Door Attacks and Mitigations
- 187. http://enterthecore.net Door Attacks and Mitigations component: hinges attack: removing the pins mitigation: security hinges or jamb pin screws
- 188. http://enterthecore.net Door Attacks and Mitigations component: hinges attack: removing the pins mitigation: security hinges or jamb pin screws component: latches attack: loiding mitigation: anti-thrust latch, properly installed
- 189. http://enterthecore.net Door Attacks and Mitigations component: hinges attack: removing the pins mitigation: security hinges or jamb pin screws component: latches attack: loiding mitigation: anti-thrust latch, properly installed component: inside thumb turn, crash bar, etc. attack: reach-through tools / thumb turner mitigation: good deadbolt, door fitment
- 190. http://enterthecore.net Door Attacks and Mitigations component: hinges attack: removing the pins mitigation: security hinges or jamb pin screws component: latches attack: loiding mitigation: anti-thrust latch, properly installed component: inside thumb turn, etc. attack: reach-through tools / thumb turner mitigation: good deadbolt, door fitment component: key boxes attack: weak locks can be picked mitigation: remove them or get a variance
- 191. http://enterthecore.net Door Attacks and Mitigations component: hinges attack: removing the pins mitigation: security hinges or jamb pin screws component: latches attack: loiding mitigation: anti-thrust latch, properly installed component: inside thumb turn, etc. attack: reach-through tools / thumb turner mitigation: good deadbolt, door fitment component: key boxes attack: weak locks can be picked mitigation: remove them or get a variance component: edge gaps attack: tricking sensors & electronic locks mitigation: better sensors, security astragal
- 192. http://enterthecore.net Door Attacks and Mitigations component: hinges attack: removing the pins mitigation: security hinges or jamb pin screws component: latches attack: loiding mitigation: anti-thrust latch, properly installed component: inside thumb turn, etc. attack: reach-through tools / thumb turner mitigation: good deadbolt, door fitment component: key boxes attack: weak locks can be picked mitigation: remove them or get a variance component: edge gaps attack: tricking sensors & electronic locks mitigation: better sensors, security astragal component: bottom gap attack: under door attacks mitigation: security door bottom and/or blocking shroud
- 193. http://enterthecore.net Door Attacks and Mitigations component: hinges attack: removing the pins mitigation: security hinges or jamb pin screws component: latches attack: loiding mitigation: anti-thrust latch, properly installed component: inside thumb turn, etc. attack: reach-through tools / thumb turner mitigation: good deadbolt, door fitment component: key boxes attack: weak locks can be picked mitigation: remove them or get a variance component: edge gaps attack: tricking sensors & electronic locks mitigation: better sensors, security astragal component: bottom gap attack: under door attacks mitigation: security door bottom and/or blocking shroud component: doorframe attack: jacking / spreading attacks mitigation: interlocking deadbolt along with stronger frame structure
- 194. http://enterthecore.net component: hinges attack: removing the pins mitigation: security hinges or jamb pin screws component: latches attack: loiding mitigation: anti-thrust latch, properly installed component: inside thumb turn, etc attack: reach-through tools / thumb turner mitigation: good deadbolt, door fitment component: key boxes attack: weak locks can be picked mitigation: remove them or get a variance component: edge gaps attack: tricking sensors & electronic locks mitigation: better sensors, security astragal component: bottom gap attack: under door attacks mitigation: security door bottom and/or blocking shroud component: doorframe attack: jacking / spreading attacks mitigation: interlocking deadbolt along with stronger frame structure Door Attacks and Mitigations
- 195. http://enterthecore.net Door Attacks and Mitigations component: hinges - $50 attack: removing the pins mitigation: security hinges or jamb pin screws component: latches - $150 attack: loiding mitigation: anti-thrust latch, properly installed component: inside thumb turn, etc - $200 attack: reach-through tools / thumb turner mitigation: good deadbolt, door fitment component: key boxes - $0 attack: weak locks can be picked mitigation: remove them or get a variance component: edge gaps - $150 attack: tricking sensors & electronic locks mitigation: better sensors, security astragal component: bottom gap - $60 attack: under door attacks mitigation: security door bottom and/or blocking shroud component: doorframe - $200 attack: jacking / spreading attacks mitigation: interlocking deadbolt along with stronger frame structure
- 196. http://enterthecore.net Door Attacks and Mitigations component: hinges - $50 attack: removing the pins mitigation: security hinges or jamb pin screws component: latches - $150 attack: loiding mitigation: anti-thrust latch, properly installed component: inside thumb turn - $200 attack: reach-through tools / thumb turner mitigation: good deadbolt, door fitment component: key boxes - $0 attack: weak locks can be picked mitigation: remove them or get a variance component: edge gaps - $150 attack: tricking sensors & electronic locks mitigation: better sensors, security astragal component: bottom gap - $60 attack: under door attacks mitigation: security door bottom and/or blocking shroud component: doorframe - $200 attack: jacking / spreading attacks mitigation: interlocking deadbolt along with stronger frame structure
- 197. http://enterthecore.net Door Attacks and Mitigations
- 198. http://enterthecore.net Door Attacks and Mitigations
- 199. http://enterthecore.net Door Attacks and Mitigations
- 200. Stay Safe Out There!
- 201. http://enterthecore.net Thank You Very Much http://enterthecore.net +1-347-263-7522 delta@enterthecore.net (PGP keys on major servers)