Physical Security Assessment & Vulnerability Analysis Flashcards

What is 'bumping' in the context of lock attack vectors?

Answer: A technique using a specially cut key struck to momentarily set all spring-loaded pins

Bump keys are cut to maximum depth on every cut and struck while applying rotational tension, momentarily setting all spring-loaded pin stacks simultaneously.

Which attack method would leave the least visible evidence on a standard pin tumbler lock?

Answer: Skilled picking with a tension wrench and pick

Expert lock picking with proper tools can leave minimal or no visible marks, making it the most forensically covert attack method on pin tumbler locks.

A forensic locksmith identifies shiny, polished marks on the upper surfaces of a keyway. What attack vector does this suggest?

Answer: Pick raking, where a serrated pick was rapidly moved back and forth through the keyway

Shiny polished marks on keyway warding surfaces from rapid back-and-forth tool movement are characteristic of raking techniques used in picking attacks.

What is 'impressioning' as an attack vector on locks?

Answer: Filing a blank key while repeatedly inserting it to create a working key from pin-mark patterns

Impressioning involves inserting a blank key, applying rotational torque, and filing the marks left by binding pins until a fully functional working key is produced.

Which vulnerability is specifically exploited in a 'shimming' attack on a padlock?

Answer: The spring-loaded locking pawl that engages the shackle notch

Shimming exploits the spring-loaded pawl mechanism by inserting a thin shim down the shackle hole to depress and bypass the retaining pawl without using a key.

In assessing electronic access control vulnerabilities, what is a 'relay attack'?

Answer: Amplifying and retransmitting signals between a credential and reader to gain access from a distance

A relay attack amplifies and retransmits the RF signal between a proximity credential and reader, allowing unauthorized access without possessing the actual credential.