Tobias on Locks and Insecurity Engineering

A detailed analysis of how locks and physical security become vulnerable to attack Tobias on Locks and Insecurity Engineering: Understanding and Preventing Design Vulnerabilities in Locks, Safes, and Security Hardware is an essential roadmap for lock design and security personnel, and a must-read for design engineers, risk managers, law enforcement personnel, intelligence agencies, investigators, crime labs, and security and IT professionals. “Marc Weber Tobias is one of the rare minds in our industry who evaluates locks and consumer product security with the same meticulous philosophy that he applies to high-security government applications. Marc distills an encyclopedic understanding of access control into pragmatic advice for creating functional, secure devices. With decades of experience, Marc brings a comprehensive perspective that isn’t easily replicated for lock manufacturers. His expertise has been invaluable to our company for many years in increasing the security designs of our products.” —Tammy Davis, CEO, Videx, Inc. Corvallis, Oregon “Marc Tobias is a world-class security expert for locks. In my FBI career in foreign counterintelligence, every aspect of security was essential to understand and deal with. Marc and I have worked on many international cases, and his extensive knowledge of locks and security was crucial to our success. Our side needed the best security, but also to figure out how to defeat the opposition’s security measures. This book should be an invaluable asset for government agencies to understand the insecurity of locks and their vulnerabilities.” —Wayne A. Barnes, FBI Special Agent (Retired) 1971-2000. “What is made clear in Marc’s work is that he points out the methods and techniques to raise the integrity of our first line of defense: locks. Our specialty for those in a career in security protective engineering is to identify and apply the highest-grade containment to protect our companies. For security professionals who rely on high-security locks and allied systems, this is a valuable reference source for security and risk managers.” —Ted P. Barron, CPP Former ASIS Chapter Chair (San Francisco), Vice President of Wells Fargo Bank, and member of the UL Standards Technical Panel on Locks and Safes. “I have known Marc Tobias now for over 20 years and it is always fascinating to have intense discussions with him about lock security and lock design. I do not know any other person with such a high degree of expertise and knowledge, always keen to ensure that today’s locks are designed to state-of-the-art technology. I am looking forward to this new compendium of centenaries of lock engineering.” —Stefan Ehrlich-Adam, CEO EVVA-Group, Vienna, Austria A must-read exploration of lock and physical security from a renowned author and expert In Tobias on Locks and Insecurity Engineering, renowned investigative attorney and physical security expert Marc Weber Tobias delivers a comprehensive and insightful exploration of how locks are designed, built, and — ultimately — defeated by criminals, spies, hackers, and even lockpickers. In the book, you'll discover the myriad ways that security experts and bad actors have compromised physical locks using everything from the newest 3D printers to 99-cent ballpoint pens. The book explores the origins of different lock designs and the mistakes that design engineers make when they create new locks. It explains the countless ways that locks remain at risk for attack. The author explains the latest lock designs and technology, as well as how to assess whether a specific solution will work for you depending on your individual security requirements and use case. You'll also find:

• Ways to differentiate between fatally flawed locks and solid, secure options
• Several relevant and real-world case examples of catastrophic lock design failures that led to monetary loss, property damage, or bodily harm
• Examinations of lock security from the perspectives of forced entry, covert entry, and key-control

An instructive and indispensable roadmap to locks and physical security, Tobias on Locks and Insecurity Engineering is the perfect guide for security and information technology professionals, design engineers, risk managers, law enforcement personnel, intelligence agents, regulators, policymakers, investigators, lawyers, and more. Foreword xxxiii Introduction xxxv Part I Locks, Safes, and Insecurity Engineering 1 Chapter 1 Insecurity Engineering and the Design of Locks 3 Chapter 2 Insecurity Engineering: A Lack of Expertise and Imagination 25 Chapter 3 Vulnerability Assessment in Lock Designs 49 Chapter 4 The 3T2R Rule for Assessing the Security of a Lock 67 Part II Legal and Regulatory Issues in Locks, Safes, and Security Systems 87 Chapter 5 Security Is All About Liability 89 Chapter 6 Legal Liability and Insecurity Engineering 103 Chapter 7 Standards for Locks and Safes 131 Chapter 8 Patents, Security, and the Protection of Intellectual Property 163 Chapter 9 Notification of Defects in Product Design 187 Chapter 10 Legal and Security Issues in Keying Systems 209 Part III Basic Designs and Technologies for Mechanical and Electronic Locks 231 Chapter 11 A Brief History of Lock Design and Development 233 Chapter 12 Industry Definitions 257 Chapter 13 Modern Locking Mechanisms: A Merging of Old and New Technology 279 Chapter 14 A Comparison of High-Security Lock Designs 317 Part IV Design and Insecure Engineering of Locks 339 Chapter 15 Attacks Against Locks: Then and Now 341 Chapter 16 An Overview: Vulnerability Analysis in Designs and Testing 379 Chapter 17 Destructive Attacks Against Locks and Related Hardware 395 Chapter 18 Covert Methods of Entry 417 Chapter 19 Attacks Against Electronic Locks 445 Chapter 20 Advanced Attacks Against High-Security Locks 459 Part V Attacks on Key Control and Special Keying Systems 475 Chapter 21 Attacking Keys and Keying Systems 477 Chapter 22 Advanced Attacks on Key Control: 3D Printers and Special Software 507 Chapter 23 Digital Fingerprints of Locks: Electronic Decoding Systems 523 Chapter 24 Code-Setting Keys: A Case Study of an Attack on High-Security Key Control 537 Part VI Specific Case Examples 545 Chapter 25 Case Examples from Part VII Rules 547 Chapter 26 Case Examples By Category 571 Part VII Design Rules, Axioms, and Principles 597 Chapter 27 Design Rules, Axioms, and Guidelines 599 Epilogue 625 Appendix A Patents Issued 627 Appendix B Trademark Listing 629 Index 633 MARC WEBER TOBIAS, J.D., is the author of eight law enforcement and security textbooks, including Locks, Safes, and Security: An International Police Reference. He has lectured extensively, worked for government agencies as an investigator and prosecutor involved in major crimes, and has consulted with the world’s largest lock manufacturers. He has been issued 30 U.S. patents.