Keys to the Kingdom: Impressioning, Privilege Escalation, Bumping, and Other Key-Based Attacks Against Physical Locks by Ollam Deviant

Keys to the Kingdom: Impressioning, Privilege Escalation, Bumping, and Other Key-Based Attacks Against Physical Locks by Ollam Deviant

Author:Ollam, Deviant [Ollam, Deviant]
Language: eng
Format: azw3, epub
ISBN: 9780123979308
Publisher: Elsevier Science
Published: 2012-12-05T16:00:00+00:00


* * *

How Master-Keying Works

I would like to paint for you a picture of a hypothetical office. There are a number of fictional people working there every day, each with their own rights and privileges. We will examine them through a look at their keys and their locks. Hopefully the associated diagrams will help you to follow along. It is my goal that these images will make it at least partially clear to you how master-keying is implemented in basic, pin tumbler locks.

In this office we will begin by examining the keys of four individuals: Alice, Andy, Bob, and Charlie. The first three are general office workers. Alice and Andy have offices right near each other on the same floor. Bob works with somewhat more sensitive information than Alice and Andy, and his office is in another part of the building. Charlie does not have to put on a suit and tie when he goes to work in the morning, as he is part of the maintenance staff. Charlie’s duties routinely take him through the area where Alice and Andy work, and his key is able to open all the doors on their floor… but Charlie cannot access Bob’s office. In a managerial role is Don, whose space is kept rather private. Only Don and his personal assistant, Dawn, have keys to his corner office. Dawn’s key will only open Don’s office door… but Don’s key opens all doors. Figure 3.1 shows the keys used by some of these employees. How is this possible?



Download



Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.