CAPECattack pattern

CAPEC-395 Bypassing Electronic Locks and Access Controls

Official page ↗
Abstraction
Standard
Status
Draft
CAPEC version
3.9

Description

An attacker exploits security assumptions to bypass electronic locks or other forms of access controls. Most attacks against electronic access controls follow similar methods but utilize different tools. Some electronic locks utilize magnetic strip cards, others employ RFID tags embedded within a card or badge, or may involve more sophisticated protections such as voice-print, thumb-print, or retinal biometrics. Magnetic Strip and RFID technologies are the most widespread because they are cost effective to deploy and more easily integrated with other electronic security measures. These technologies share common weaknesses that an attacker can exploit to gain access to a facility protected by the mechanisms via copying legitimate cards or badges, or generating new cards using reverse-engineered algorithms.

Related

Child of · CAPEC (1)

  • CAPEC-390 Bypassing Physical Security attack pattern

Referenced by CAPEC · child of (5)

  • CAPEC-397 Cloning Magnetic Strip Cards attack pattern
  • CAPEC-398 Magnetic Strip Card Brute Force Attacks attack pattern
  • CAPEC-399 Cloning RFID Cards or Chips attack pattern
  • CAPEC-400 RFID Chip Deactivation or Destruction attack pattern
  • CAPEC-626 Smudge Attack attack pattern