DEF CON 32 - Access Control Done Right the First Time - Tim Clevenger
Source: YouTube · DEFCONConference · published Oct 16, 2024 · 24:22
The main goal of this talk is to provide practical, security-focused installation tips for access control systems, emphasizing reliability, future-proofing, and resistance to bypasses—especially in large or complex facilities. 0:00
Key Takeaways:
• Mercury Security systems offer vendor flexibility with reflashable firmware, reducing hardware costs when switching vendors 1:41.
• RS485 wiring is cost-effective for long distances but sensitive to interference; proper shielding and termination are critical 3:53.
• Remote power supplies are necessary for high-amperage locks but should be placed in accessible locations to avoid costly drywall modifications 5:51.
• Use composite access control cables with shielded, pre-wired conductors to prevent tampering and ensure reliable communication 9:30.
• Batteries are vital for system continuity during power outages; specify power supplies with charging and fail-safes, and label install dates for maintenance tracking 14:02.
• Fail-safe doors are safer in emergencies; ensure systems comply with local fire codes and include a nox box with tamper detection 15:22.
Access control systems must be designed with future needs and security in mind—prioritize reliability, proper cabling, and auditability to avoid bypasses and outages. 24:12
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
all right hello wow that's loud hi uh this is access control John right the first time my name is uh Tim Clevenger a little bit about me I'm a network cyber security engineer by day by night I'm a low voltage Hardware junkie vintage Computing Enthusiast in a previous life I was certified with lenel in S2 access and video and I got to drive around in a truck and look at other systems uh available on the uh in in uh Southern California uh I'm on the physical security Village Discord my handles NSFW no I will not tell you why it's my handle a little bit about this talk uh you know we have a lot of talks about bypasses my talk is more about the installation of a system uh I'm looking to give some tips and tricks based on the kind of systems that I had seen and had to work on uh a lot of vendor…