Tailgating or piggybacking is an outdated however efficient social engineering method to realize bodily entry to restricted areas, in keeping with Rahul Awati at TechTarget. Tailgating is when a nasty actor merely follows an worker via a door that requires authentication.
“Tailgating is among the easiest types of a social engineering assault,” Awati writes. “It’s a simple approach for an unauthorized celebration to get round safety mechanisms which can be assumed to be safe. The safety comes into query because of a mixture of human carelessness (the adopted celebration) and ingenuity (the next celebration). For instance, a retina scanner is supposed to restrict entry to a bodily space by scanning the retinas of licensed personnel. Whereas retina scanning authentication works, unauthorized events can achieve entry to a secured space if an worker holds the door for an unknown particular person behind them out of a misguided sense of courtesy or behavior. Such a well mannered gesture could also be exploited by people to realize entry to a location they won’t have been capable of entry in any other case.”
Tailgating most frequently happens when an worker holds the door for an additional particular person out of politeness.
“Risk actors make the most of cognitive biases that have an effect on human decision-making,” Awati says. “One such ‘human bug’ is the tendency to be courteous. One other is the tendency to belief different individuals. An individual holding the door open does not sometimes assume {that a} tailgating particular person is just not imagined to be there, or worse, intends to hurt the group. Tailgating is a standard downside in multi-tenanted buildings the place many individuals entry the constructing, making it tough to trace unauthorized personnel and maintain them out. Tailgating additionally occurs extra usually in corporations the place staff do not observe cybersecurity finest practices. This can be because of carelessness or insufficient coaching.”
Not that you really want everybody to be impolite, however all fair-minded individuals perceive which you can’t sacrifice safety for politesse. New-school safety consciousness coaching may give your staff a wholesome sense of suspicion to allow them to thwart social engineering assaults.
TechTarget has the story.
