The Four Types of Locks

Transcription

1 The Four Types of Locks by Event Name XXXX-XX-XX

2 Who am i?

3 Who am i?

4 Who am i? auditing assessments research trainings

5 Who am i? auditing assessments research trainings workshops public lectures lockpick village contests & games

6 Who am i?

7 Who am i?

8 Who am i?

9 But on to locks

10 But on to locks why do they matter?

11

12

13

14

15 All your hard work here

16 All your hard work here gets undermined here

17 The Lowest Grade of Lock a.k.a. The Locks That You Are Probably Using

18 Pin Tumbler Locks

19 Pin Tumbler Locks

20 Pin Tumbler Locks

21

22

23

24

25 Pin Stacks

26 Key Operation

27 Bitting Too Low

28 Bitting Too High

29 In a Perfect World

30 In the Real World

31 In the Real World

32 In the Real World

33

34

35 Lifting Picking

36 Raking

37 Wafer Locks

38 Wafer Locks

39 Wafer Locks

40 Wafer Locks

41 Raking & Jiggling

42 Shimming

43 Bumping

44 Bumping

45 Pick Guns

46 Bump Key Attack Pull Method

47 Bump Key Attack Push Method

48 Bump Key Attack Push Method

49 Where are you using these weak locks?

50 Outdoor Rugged Locks

51 Outdoor Rugged Locks

52 Outdoor Rugged Locks

53 Outdoor Rugged Locks

54 Outdoor Rugged Locks

55 Outdoor Rugged Locks

56 Desk Drawers & Filing Cabinets

57 Power Panels

58 Sensitive Wiring

59 Sensitive Wiring

60 Sensitive Wiring

61 Why are most locks this bad?

62 It s a Problem of Standards American National Standards Institute Classification A156 No Covert Security Ratings At All American Society for Testing Materials Classification F883 Toughest Rating is only 15 minutes

63 Many Times, Picking is Instantaneous

64 You Need a Response Window

65 One Step Up Pick Resistant Locks

66 Advanced Keyways Simple straight and wide

67 Advanced Keyways Simple Medium straight and wide straight but narrow

68 Advanced Keyways Simple Medium Complex straight and wide straight but narrow thinner and curvy

69 Advanced Keyways Simple Medium Complex Harder straight and wide straight but narrow thinner and curvy lots of angles

70 Advanced Keyways Simple Medium Complex Harder Fiendish straight and wide straight but narrow thinner and curvy lots of angles overlapping wards

71 Un-Shimmable Padlocks

72 Pick Resistant Pins

73 Pick Resistant Pins

74 Pick Resistant Pins

75 Pick Resistant Pins

76 Pick Resistant Pins

77 Bump-Resistant Pins Top Gapping

78 Bump-Resistant Pins Anti-Bump Driver Pin

79 The Next Step Up High Security Locks

80 Side Pin Schlage Everest pin springs driver (top) pins key (bottom) pins plug check pin spring check pin specialized key

81 Side Pin Schlage Everest photos courtesy of Matt Blaze

82 Side Pin Schlage Everest photos courtesy of Matt Blaze

83 Side Pin Schlage Everest specialized finger tensioner modified Everest key

84 Side Bars Similar to side pins Restrict plug movement Harder to pick than pin stacks

85 Side Bars Finger Pins

86 Side Bars Finger Pins

87 Side Bars Finger Pins Schlage Primus

88 Side Bars Sliders

89 Side Bars Sliders

90 Side Bars Rotating Pins

91 Side Bars Rotating Pins

92 Rotating Pins Medeco Locks Medeco plug exposed, key pins rotating to align sidebar cuts Top View Side View

93 Rotating Pins Medeco locks certainly not unpickable Can be picked Can be bumped Numerous weaknesses Open in 30 Seconds Marc Tobias Tobias Bluzmanis

94 Rotating Disks Sometimes Very Good Security Mimics a safe lock Difficult To Pick Takes much time and great skill Specialized tools required

95 Rotating Disks Sometimes Very Good Security Mimics a safe lock Difficult To Pick Takes much time and great skill Specialized tools required Two-in-One Tool Manipulates disks individually Decodes cut positions Barry Wels picking a rotating disk lock with Mike Glasser

96 The Highest Grade Dare we say unpickable locks?

97 Specialized Rotating Disks Abloy Protec Not just rotating disks Disk blocking mechanism Unpickable? Closest I ever come to using that word Two-in-one tools cannot be used

98 Certain Magnetic Locks Miwa Japanese company Array of magnetic pins Simple North / South Evva MCS Austrian company Axial-rotated magnets Interaction with sidebar

99 Evva Magnetic Code System Possibly the most duplication-resistant lock

100 No Known Attack or Bypass Protec MCS

101 What About Safes? photo courtesy of Don the Shadow

102 What About Safes?

103 What About Safes? S&G 8400

104 What About Safes? photo courtesy of Barry Wels

105 What About Safes?

106 But what about destructive entry?

107

108

109

110

111

112 There s one upshot you know it happened

113 The scarier risk is non-destructive entry

114

115

116

117 Different locks for different purposes

118 1. Basic Locks No special protections No bypassing resistance Unskilled Attacker basic tools & techniques, under 5 minutes Skilled Attacker basic tools & techniques, under 5 minutes

119 2. Resistant Locks Some pick-resistant pins (possibly tighter keyway) Bump resistant, Zero potential of shimming or over lifting Unskilled Attacker basic tools & techniques, more than 5 minutes Skilled Attacker basic tools & techniques, under 5 minutes

120 3. High Security Locks Advanced pick resistance, possibly wholly new mechanisms Zero potential of shimming or over lifting or bumping Unskilled Attacker no chance in less than 30 minutes Skilled Attacker special tools & techniques, at least 5 minutes

121 4. Unpickable Locks Advanced pick resistance, possibly wholly new mechanisms No potential of shimming or over lifting / Bump resistance Unskilled Attacker no chance at all Skilled Attacker highly special tools & techniques, at least 30 minutes (and quite possibly a lot of disturbance created)

122

123

124

125

126

127

128

129

130

131 Protecting against force or finesse?

132 A New Physical Security Framework Three Types of Secured Area External Access Internal Access Sensitive Access Which Locks Go Where?

133 A New Physical Security Framework Basic Locks Utterly unacceptable Should be removed, in my view False sense of security Inevitable cross-contamination X

134 Cross Contamination with Locks

135 Cross Contamination with Locks

136 Cross Contamination with Locks

137 Cross Contamination with Locks

138 Cross Contamination with Locks

139 Cross Contamination with Locks

140 Cross Contamination with Locks

141 A New Physical Security Framework Basic Locks Utterly unacceptable Should be removed, in my view False sense of security Inevitable cross-contamination X

142 A New Physical Security Framework External Access Personnel Doors Wiring / Utilities Susceptible to Vandals & Thugs High Security Locks Should Be Required X

143 A New Physical Security Framework Internal Access Office Doors Closets Protecting Privacy & Supplies, not Data Pick Resistant Locks Are Acceptable X

144 A New Physical Security Framework Sensitive Access Server Racks Networking Equipment Any Termination-Worthy Data Unpickable Locks Should Be Used X

145 To Me, a Proper Lock Should Be Totally Immune to Zero-Skill Attacks Resist Skilled Tactics for Thirty Minutes Leave Behind Clear Signs of Tampering

146 Security is only as effective as the people behind it

147 Social Engineering

148 Social Engineering

149 Social Engineering

150 Social Engineering Preparedness Stop

151 Social Engineering Preparedness Stop Challenge

152 Social Engineering Preparedness Stop Challenge Authenticate

153 Social Engineering Preparedness Stop Challenge Authenticate

154 Social Engineering Preparedness Stop Challenge Authenticate then you follow this with Reward

155 Social Engineering

156 Social Engineering

157 Forensic Evidence

158 Forensic Evidence

159 Forensic Evidence

160 Forensic Evidence

161 Forensic Evidence 250 uses

162 Forensic Evidence 1,500 uses

163 Forensic Evidence 5,000 uses

164 Forensic Evidence 250 uses

165 Forensic Evidence 1,500 uses

166 Forensic Evidence 5,000 uses

167 Forensic Evidence

168 Forensic Evidence

169 Forensic Evidence

170 Forensic Evidence

171 Forensic Evidence

172 Forensic Evidence picking

173 Forensic Evidence raking

174 Forensic Evidence both

175 Forensic Evidence ugh

176 Forensic Evidence wow

177 Forensic Evidence

178 Forensic Evidence pin sides

179 Forensic Evidence

180 Forensic Evidence

181 Forensic Evidence tail cam

182 Forensic Evidence

183 Forensic Evidence

184 Forensic Evidence

185 Forensic Evidence

186 Forensic Evidence

187 Forensic Evidence

188 Forensic Evidence bumping

189 Forensic Evidence bumping

190 Forensic Evidence

191 Forensic Evidence

192 Forensic Evidence

193 Forensic Evidence Sometimes major insurance implications Suspect something fishy? Don t compromise the scene Contact a professional Forensic Locksmith vs. Yellow-Pages Locksmith Having newer locks matters Age makes for a mess, internally Also your locks should be updated as a matter of routine The facts are out there!

194 So Which Locks are Which? Unpickable High Security Resistant Protec (rotating disks) MCS (magnetic) MT5 and MT5+ (electronic safe dials) Granit & Diskus (rotating disk) Twin (counter-milling, finger pins) 3KS (sliders), DPI (new models) Primus (if upgraded properly) Padlocks (heavy duty models) Interchangeable Cores (modern models)

195 Thank you so much. Thank you to TOOOL, Babak, Dave, Steve, JVR, Mouse, Mr. E, Barry & Han, Laz, Valanx & the FOOLS, Datagram, Matt Blaze, Jackalope, Renderman, Bruce & Heidi and especially Daisy

196 So Which Locks are Which? Unpickable High Security Resistant Protec (rotating disks) MCS (magnetic) MT5 and MT5+ (electronic safe dials) Granit & Diskus (rotating disk) Twin (counter-milling, finger pins) 3KS (sliders), DPI (new models) Primus (if upgraded properly) Padlocks (heavy duty models) Interchangeable Cores (modern models) this presentation is CopyLeft by. you are free to reuse any or all of this material as long as it is attributed and freedom for others to do the same is maintained