-: Now, all of your perimeter defenses
will become useless at some point.
When is that point?
It's when somebody enters your building.
That's right.
If we have big high fences.
And we have guards with guns.
And we have security cameras
monitoring the parking lot.
All of that is useless to us
once the person gets into our lobby.
And, even if we have a mantrap
or something that's keeping them
out of our secure spaces,
once they get past that,
we now have them roaming our halls
and being able to get to things.
How do we keep people out of those spaces
that we want them to be out of?
We use locks.
And door locks come in many different varieties.
They're going to be placed on the outside of the building.
And they'll be placed inside the building
on server rooms, network closets,
and other places we want to keep people out of.
Now, not all locks are created equal, though.
I've seen people try and use padlocks to keep a door secure.
In the next video, I'm going to show you how easy it is
to break through the security that a basic
padlock tries to afford you.
And suffice it to say,
it takes a skilled attacker only about 30 seconds
to open a padlock.
So, they're not very good for security.
Other door locks that are pretty easy to break
are the ones you'll see in a traditional office
or in your home.
Those that use a key are fairly easy to break
if you have a trained locksmith
or a trained attacker.
So, instead of a padlock, we're going to use
something like a door lock.
Now, door locks, again, come in many different varieties.
Some use a key.
Some use a PIN number.
Some use wireless signals.
And some even use biometrics,
like a thumbprint, to open and shut the lock.
Now, better security does exist
as you move up the ladder, but so does cost.
At the bottom of the ladder,
we have a basic office door lock.
And it might be very inexpensive,
but it also lacks good security.
This is one that will be found on your house
or in a simple office building where it
uses a standard key to open and shut the lock.
These use a pin and tumbler system that can be picked
by a trained locksmith fairly easily.
Another type of door lock is known as a cipher lock.
Now, a cipher lock provides excellent protection
using a mechanical locking mechanism with push buttons
that are numbered that require a person
to enter the correct combination in order to open that door.
These are often used on server rooms, network closets,
and other high security locations.
They do cost more than a traditional office lock,
but they do have the ability
to give you a higher level of protection.
Next, we have electronic access systems.
These electronic access control systems
have become quite popular in recent years
as the price has been falling.
These can use an RFID reader
to scan an employee's badge and
grant them access based on those credentials.
Some of these will actually be combined
with a badge and a PIN number,
to create multi-factor authentication
that allows for logging and auditing, as well.
This is a great thing about these type of systems.
Because, now, you know who's entered
and exited the room and at what time.
So, if there was some kind of insider threat
where somebody stole something, you can go back
and figure out who was the last person
who went in and out of that room.
And figure out if they're the ones that did it.
In addition to these door locks,
we also might use something called a mantrap.
Now, a mantrap is an area between two doorways
that holds people until
they're identified and authenticated.
Sometimes, these are automated,
like using that electronic badge
and PIN system we talked about.
And sometimes, they are manned by security personnel
who actually look at your ID badge
to verify that you are who you claim to be.
The most common placement of a mantrap
is actually at the entrance of the building.
So, as you enter into an office building,
there is an open lobby that anyone can access.
But, then there's a set of turnstiles.
And you'll have to scan your badge and input your PIN number
to be able to go past those turnstiles.
That area between the front door and the turnstiles,
that's considered the mantrap.
Once you get past that turnstile,
you're now in a secure area
because you have been authenticated.
Now, some places have open security on the main floor
and, as you go into certain parts of the building,
they would then go into a higher security area.
Those areas may also have a mantrap installed.
And sometimes, you'll have both.
Where there is a mantrap into the main entrance
of the building, that gives you general security,
but then, if you need to go into a super secret area,
you go through a second mantrap.