This is a follow-up question to this one: Roles to play when tailgaiting into a residential building

How do you protect yourself or your company against tailgaters? What is the best answer when you are asked by, let's say the delivery guy, to let you in?

  • 85
    .... "No." .... – A C Nov 18 at 4:07
  • 3
    Is there data about where/when tailgating is most likely? For example, I've seen places where dozens of people go out for smoke breaks at the same time, and return at the same time, and this smoking area is outside a standard entrance. It seems to me that this would be an ideal time/location for a tailgater to get in. – Andy Lester Nov 18 at 20:51
  • 3
    @AndyLester "most likey"? No, I have not seen data. But there is a lot of data about how physical pen testers have been successful, and the "smoke break" route is the common vector. – schroeder Nov 19 at 10:38
  • 4
    A simple set of doors with someone to ask how they came to be on private property without permission, and cameras to catch the doorman whom lets the randoms in. When it comes down to "We can't catch the other person, but you let them in." no one will trade reprimand and their job to let a stranger in. – Rob Nov 21 at 2:44

19 Answers 19

up vote 132 down vote accepted

This is not a problem that has a social solution. No amount of corporate policy will save you. Humans are social animals. In the end, if people can let other people in, they will. Even if you may be very security aware and not let anyone in, 95% of your collegues will act differently.

You have to work with human nature, not against it.

So if you want to stop tailgating, you'll need one of these, perferably placed in a reception with human supervision:

Revolving door only letting one person in at a time.

  • 61
    there are nicer-looking gates :) – schroeder Nov 16 at 15:34
  • 4
    @schroeder Indeed. I've seen Metro/subway turnstiles/gates at occasional office buildings, though its not quite as secure. – mbrig Nov 16 at 16:25
  • 63
    @Bakuriu Most of the turnstiles I've seen like this have enough room for me and someone I know pretty well, but not enough room for me and a total stranger. It'd be pretty awkward to tailgate through one of these. – Nuclear Wang Nov 16 at 20:22
  • 3
    @Bakuriu, I certainly do remember one at a back entrance where two normal adults would not fit. At the front entrance there was a normal, more comfortable, turnstile, but there was also security guard there. – Jan Hudec Nov 16 at 20:48
  • 7
    @Bakuriu there are better doors that physically don't allow anyone to fit in. Somewhat extreme example in this answer worldbuilding.stackexchange.com/a/126499/39218 to a question in Worldbuilding SE. – Gnudiff Nov 17 at 7:39

You protect yourself by politely challenging people who are trying to get in without using the controls. You simply ask to see their pass or offer to escort them to reception/security. I use the simple phrase, "I'm sorry, I do not know who you are so I cannot just let you in. May I escort you to reception?" If they resist, I monitor them and quietly inform security. For me, it doesn't matter if they are the CEO or a delivery person.

The company protects itself by

  • installing physical gates that only allow one person in at a time
  • controls that prevent the same passcard being used on the same side of the gate
  • human monitors to detect tailgating
  • training people to politely challenge those trying to get in without using the proper methods
  • 24
    "I'm sorry, I do not know who you are" - this risks offending people who expect you to know who they are, which can have nasty consequences, especially if you're below-average at remembering people's appearances. Even if the official security policy says it doesn't matter who they are, it matters in practice. – user2357112 Nov 16 at 21:11
  • 33
    @user2357112 do you have an alternate phrase to use? Because in no way should you let someone in just to avoid social awkwardness. And yes, I have said that to CEOs. The security policy should matter more than egos. It NEEDS to matter more than egos. – schroeder Nov 16 at 21:20
  • 35
    There are two kinds of CEOs: ones that will be pissed, and ones that will applaud you. Either way, you get to find out whether your CEO has your back or not, so it's a win for you. – Jörg W Mittag Nov 16 at 22:17
  • 40
    Our company is teaching this every three months for years, and makes everyone sign that they got it. Effect: zero. 95% of people hold the door for anyone that doesn't look like a bum. – Aganju Nov 17 at 3:54
  • 19
    If you're after an alternative phrase that doesn't risk offending people, I tend to use "Sorry, have you got your badge?". Suggesting that it might be in their pocket or tucked into their coat is far more polite than suggesting they're a criminal. If they actually can't produce it, then procedure is for employees to go to reception or security and ask for a temp pass anyway - "Oh, you forgot it? Been there before. You know reception can sort you out? Shall I take you?" - I'm trying to be helpful and sympathetic but pretty clearly enforcing that they can't come in without a pass. – ymbirtt Nov 19 at 10:28

The cheap solution is to put up scary “no tailgating - everyone must badge in at this door - no exceptions - don’t risk your job - report all tailgate requests to Joe at 123-456-7890” signs at each unattended controlled portal. Make sure there are obvious cameras in the vicinity.

If you want people to challenge someone, it’s much easier for them to do so when they have something to back up their assertions. That way they can point to the sign and blame it, instead of coming up with their own reason.

  • 3
    "Make sure there are obvious cameras in the vicinity" -- and if you want to be paranoid, non-obvious, hidden ones that catch things from different angles. – Nic Hartley Nov 19 at 20:57
  • 9
    The point is less to investigate the tailgaters than to give the employees a policy sign to blame. Tailgating is a social problem, and you want your employees to have to deal with it as little as possible. – John Deters Nov 19 at 21:01
  • I'm aware. That's why the extra cameras would be an additional security measure ("if you want to be paranoid"). – Nic Hartley Nov 19 at 21:04

(Just a passer-by opinion)

Obviously, a physical gate would work the best.

In case you don't want to install these, you may try to request all employees to challenge tailgaters, as schroeder suggests. However, I want to underline one distinction that I find important.

One my employer had the policy "do not allow strangers in, but allow people that you know, even if they do not scan their bage etc.". I have always found this to be somewhat embarassing. I have a bad memory on faces, so I can easily not recognise one of my peers, and if I ask them who they are, this will be an embarassing situation. I believe this is the main reason why such policies do not work good.

At the same time, another my employer had a different policy: "everybody must scan their badge, even if they come in as a group". And it was followed; even if we a group of peers were going to a canteen together, everybody in the group would scan their badge at a controlled door. This makes much easier for employees to control tailgating. In normal situation everybody will scan their badge with a distinct beep. If someone follows me and I do not hear a beep, then I am absolutely not that embarrassed to challenge them. Just because in case he is in fact my peer, he has already done something (a bit) wrong, and thus it's ok for me to challenge him.

  • 13
    The problem with letting in people that you recognise is the case when the employee was recently let go. – schroeder Nov 16 at 19:17
  • 17
    Our company policy is the "everybody must scan" sort. If the CEO of the company forgot his badge and wanted to tailgate through on my swipe, I'd have to tell him "Sorry, sir. I'll be happy to sign the log with the front-desk guard to get you into the building as my guest, since I recognize you, (and they are going to ask you to show your government-issued photo ID for the log, just in case you're a look-alike who fooled me, and make you hang a Visitor badge around your neck) but I won't subvert security policy by letting you enter without going through that documented-exception process." – Monty Harder Nov 16 at 21:25
  • What do you mean by "a physical gate would work the best"? Tailgating is when someone with access lets someone in through a gate, literally. What is a gate if not physical? – pipe Nov 19 at 15:45
  • 5
    @pipe there are "single person" gates and doors that make it to where only one person can reasonably fit through at a time. A normal door you can swing open and easily let in a dozen people before someone lets it close. Access control gates make it almost impossible for two people to pass, or at least make it uncomfortable enough that people would rather not do it. – JPhi1618 Nov 19 at 18:51

As a receptionist, I am trained to vet everyone who comes into the building. If I do not recognize that person, I immediately ask if they need help with anything, and who they have come to see. If they attempt to act with a sense of urgency or authority, then I notify them that they must sign in before entering the building because of food safety protocols, and continue to ask them about the details about why they are here, and then let the person responsible for meeting with them or checking up on them know that they are here.

Our office is relatively relaxed so we let a variety of people in, but typically having several procedures to "slow a person down" like having to sign in, talk to and be vetted by at least one person, and be directed to where they need to go can be very beneficial.

  • 5
    Unauthorized tailgaters rarely use the front door. The main concern for this subject is going to be those back-doors that make it easy to convince someone on their smoke break to let you into an unsupervised entrance. There are many social engineering tricks to beating receptionists, but that is a different question. – Nosajimiki Nov 17 at 7:22
  • 2
    If a building has multiple entrances with a main reception desk, it would seem like the only logical thing to do in that situation would be to either have the receptionist have access to camera systems for other entrances, someone in IT, or a full/part time security guard. Edit : Posted before I finished my comment. As you stated in your response, people will find workarounds when it comes to social encounters, so the only way to ensure this doesn't happen would be to put procedures in place to have people dissociated enough to actually pay attention to these kinds of things. – William Michael Nov 18 at 6:23

One solution is to have "secret drills".

Ask someone to let you in without a badge. Try and convince them as best you can to let you in. If they let you in without a badge, fire them. Otherwise, reward them.

Okay, it does not need to be that severe, but the point is that the secret drills should be frequent, and there is a clear incentive not to let you in much greater than the social consequences. You might want to start with a more reward focused approach, but as the employees become aware of the secret drills, you should move more towards punishment, since they should "no better".

Of course, don't always use yourself. Use the CEO. Use their immediate boss. Use other employees (although be careful with this, since the employees might let others know they are part of the secret drill. Fake employees might be better). Use someone on a phone just walking in. Use a smoking clown with with a fire axe on his back and a police cap on the head holding 6 packages with a clipboard lying on top demanding to enter the building to check on his elderly mother because he is worried that there is a gas leak.

  • 9
    One solution is to have "secret drills". so...a rather standard pentest? If they let you in without a badge, fire them. which would be terrible for morale. It's also pretty hard to enforce this the more people work in a building. Especially in a shared office building. What are you going to do if somebody from another company lets you in? Or maybe one of their guests for the day? – vlaz Nov 17 at 18:08
  • 5
    there's no company in the world that has enough money to pay me to work for them and have such a policy. If the company can't solve their security issues without getting into my business at the company, it's their own damn fault, and there's no reason I have to pay for it. – Andrei Nov 18 at 13:22
  • 3
    @Andrei I don't quite understand what you mean by that. This is a threat vector that pretty much only exists due to individual employee behaviors. The issue is the employees letting unauthorized people in, so the only way to solve the security issue would involve "getting into your business at the company" by making sure you follow security protocol (or full-time security at entrance points and a high-tech system, which is costly). I don't see how this would be any different than breaking other security policies. Every user of the system has some role in security. – JMac Nov 19 at 14:45
  • 7
    @Andrei Security practices should never only be the responsibility of the employees with security jobs. They would come up with the policies, and attempt to enforce them; but that doesn't mean regular employees can ignore security entirely. Your employees should be trained to not allow tailgaters at all. Sometimes installing turnstiles and the measures you talk about (such as security guards) is prohibitively expensive. That doesn't mean you can't have security practices in place with your employees, and enforce those practices. Low-overhead companies may need security too. – JMac Nov 19 at 15:14
  • 1
    @PyRulez That said, there is also risk in drills using your own employees. If you know Chad in the IT department might write you up if you let him in, then you can become wary of the people you know, but still complacent with strangers with a clipboard which is the opposite of what you want. The best drills are done by outsourcing a CEH or similar professional who knows the common conns to earn trust, to see if your employees will obey policy when it really matters. – Nosajimiki Nov 19 at 15:21

There's a lot of value to a sign, at least relative to its literal and sociological costs, but I would assume that the text matters.

Any variation of You/Everyone must swipe in at this door will set up a rule which an intruder might choose to break. It doesn't set up an expectation of rule-compliant people to enforce the rule on their peers or strangers. Even more precisely, it doesn't reassure rule-compliant people that their peers won't perceive them as uptight for enforcing the rule.

I would suggest something like
Make sure everyone entering with you swipes in. Listen for the beep indicating that their badge is valid/up-to-date.
If I'm entering the building with someone, then I know that they've seen the sign that says that I have to ask them to swipe in.

Once I got a tour by the CEO of ADB through one of their factories. Before we could enter there were 2 control posts. To enter the parking lot you had to go through an ID verification. If you walked to the building you came by this post also.

The second verification you had to go through was at the entrance. All employees, visitors,... must enter through this entrance. After the door closed you were locked in a grey zone. After you passed another ID verification you received your badge to enter the building. There is no other way in or out. If you left you had to go through the same verification.

Another example of this technique is used by a company that I used to work for. They buy/sell gold in large quantities. If you wanted to enter the building, you had to push a button, then state your business and name while looking into a camera. If the door opens and you enter the building you are locked in a small room where ID verification happened. And your bags are checked everytime you enter or leave. Even people that worked there 5+ years had to go through all those security steps. I never saw anyone with bad intents get further than the first door. If the situation is fishy the person stays locked in that room, the security takes away this person for further investigation. Never I have seen this system fail.

If the situation really matters that much, you station a security person at every entrance whose entire job is to challenge people who enter without swiping — even people known to them, since access can be revoked suddenly. Then you back this up with security camera spot checks, where the job of the cameras is allowing a supervisor to verify the guards are doing what they are supposed to, in addition to keeping records of entrances/exits.

Eventually, I expect computer vision technology to evolve to the point where a camera can be smart enough to do most of the job of the guard. It doesn't have to identify people or do facial recognition... the camera only needs to detect the number of total people vs the number of distinct swipes, and you can use infrared in addition to visible light to make it difficult to fool the camera.

Another option is the door fob only rings an alert in the security office, where it's up to a security officer there to unlock the door based on how the camera feed correlates to the fob logs. That can be much cheaper than stationing a guard at every door, while still providing most of the same security against tailgating.

  • They have been that smart for a few years now, and are already used in this capacity, although you only really see them in really high profile buildings like major data centers, expect this technology to become a lot more common place in the next few years. – Nosajimiki Nov 17 at 7:30

This is hard and you need to think about the tradeoff it implies. Most tailgaters should be allowed into the building-they really do have a beneficial purpose there. My company had multiple buildings with doors that only permitted one person through, but I could swipe my badge and let anybody in, then swipe again and go in myself. (I used to joke I should get double pay because there were two of me at work.) Visitors were supposed to check in with reception, but that was in another building and they still needed me to swipe them in-they were not given badges that would swipe.

You have a choice between a serious effort to prevent tailgating and viewing your access controls as the first step of a defense in depth. If you really want to prevent tailgating, you need to accept that beside the personnel cost for monitoring you will slow everything down. Copy machines will not get repaired as promptly, so meetings will not be as efficient. Some meetings with outsiders will not happen because it is just too much trouble. Maybe one of those held the secret to the ultimate success of your company.

How bad is it if an unauthorized person gets in? Will they be challenged if they are just wandering around unescorted? Is it worth the cost to really prevent, as opposed to just making it a bit difficult? I started with "this is hard".

Clearly this is not an answer to the question as asked, but it seems there is an underlying assumption that we need to prevent tailgating. That is true in some situations, but not all.

  • You appear to use the 1 unique building that you experienced as a general state & that is not at all correct or useful as an example. "Copy machines will not get repaired as promptly, so meetings will not be as efficient."? The logic here escapes me. Neither the copy machine/meeting diad nor the "you must allow tailgating for repair people" conclusion. "Some meetings with outsiders will not happen because it is just too much trouble."? I have never, in all my career, felt or experienced others expressing that a meeting could/should not happen because visitors needed to go to reception. – schroeder Nov 27 at 21:04
  • @schroeder: the general idea is that if you make it harder for people that you want in the building to get in, including preventing tailgating, some of them will not come in and whatever good they were going to do will not get done. I don't think that is specific to any one situation. "It's just too much trouble" carries a lot of weight. – Ross Millikan Nov 27 at 21:46
  • Going to reception is normal, standard, and expected from all possible parties. It is also a requirement in many situations for basic physical security of the premises, information, and the people. – schroeder Nov 27 at 21:49

A lot of good answers already, I'd add just one bit:

People counter. These range from really dumb (single photointerruptor) to pretty neat (oveahead multisegment infrared -- cheap and effective, sometime prone to hats) to AI that tracks people in the video stream. Perhaps couple that with an access card and block access / sound alarm / turn on floodlights if number of presented access tokens is less than number of people detected.

The point is that "good" actor will not be allowed to enter if "bad" actor is present. This helps solve the social problem: "Please let me in, I'm xxx of yyy." is met with the response of "I'd love to but I physically cannot, and now because of you, I can't get in either".

If that were to be deployed, then there has to be a secondary manned entry point, because one day an employee/resident shows up with a kid, a disabled person, accompanied by a camera crew, police, firefighters, etc. Thus, in effect, the automated system takes the load off the manual system.

https://en.wikipedia.org/wiki/People_counter

When dealing with someone who is tailgating me, I use the 'U-turn and wait' method. So for example, if I'm about to approach a locked door and I think someone is following me to get past, I will simply U-turn (not even opening the door) and then move towards a bench, seat or spot where I can pretend busy myself.

If the person is legitimate, they'll haul out their own credentials and go inside. If they're not legitimate they're faced with the awkward prospect of standing there looking like a dope at the door or also doing a U-turn (which is a big giveaway they were indeed tailgating).

I make sure I'm busy looking enough to make asking me difficult, and if they do ask if I'll let them in, I'd simply say 'Sorry, I'm not allowed, company policy'. Then I either wait for them to go away, or an opportunity to slip inside where I can go in and close the door before they can react.

  • Of note, this same behavior is common of tailgaters too. Often a tailgater will appear busy outside of a secure door, and then just follow the first careless person in. This is an effective strategy because people are less likely to "interrupt" you with questions if you tailgate while looking busy on your phone. – Nosajimiki Nov 21 at 18:19

I used to work in a high security office that had very strict controls on who went where within the building. They had standard rules like everyone had to have their pass on display on a lanyard around their neck. There was secuirty patrolling that would stop anyone without a lanyard and you could lose your job if stopped.

To stop any tailgating, the entire office operated airlock style doors. You swipe your pass to unlock the first door, enter the 'airlock' which was only big enough for one person and close the door. Once the first door is closed you can swipe your pass inside the airlock to open the other door and be let through. That door then needs to close before anyone else can use the system. They had cameras inside all of the 'airlocks' and you would ofcourse be fired for trying to get 2 people inside one, not to mention that it would be very awkward and intimate to do so. These doors were on every enterance and exit to any room, and to the building as a whole. This means that even if someone were to get in, they would not be able to move around or leave the building again.

While there were sometimes queues to get through certain doors, and all conversations had to be paused while you went through these doors, they never really caused any issues and I never heard of anyone managing to sneak through the system so I would say it was pretty good.

The security process at Apple makes this simple: if there is a badge reader, you are required to badge in for access. No exceptions. At very busy doors, like the ones headed into (and out of) the cafeteria, there is a security guard who verifies that you've badged in -- no unlock noise, no entry. Otherwise, every single person is required to badge in, one at a time, to enter any secured area, which is pretty much every interior space.

All employees and contractors know the rules; there was never any "I don't recognize you" awkwardness because we knew we all had to have our badge and had to always use it, and we all knew that proper process was to wait until everyone had their badge before starting in.

Breaking the rules was a firing offense, so you didn't break them. And before you ask, I don't know if Steve Jobs had to badge in or not.

  • What happened if someone lost the badge or it was damaged, and the place where it could be replaced was only reachable through locked doors? Where there security personnel who were allowed to escort people without badges? – vsz Nov 23 at 7:26
  • Managers had spare badges available, signed out to them, so you called your manager to have them come down and let you in. You could exit without a badge, but you couldn't get in without one, so you called your manager (and waited outside if they were in a meeting) and they came out with the temp badge, and left it with them at the end of the day. Badge replacement was available during working hours at a specific location, but you only did that if you'd really lost your badge, – Joe McMahon Nov 24 at 2:39

My bank has an "airlock". A (presumably very toughened) glass corridor with automatic sliding doors at both ends. It is impossible for both to be open at the same time. I presume that in the event of a bank robbery a button gets pressed while the robbers are exiting, and they are then trapped between the two doors until the police arrive.

I have never seen this arrangement with the security desk on the other side of the wall of the glass corridor, but that ought to offer maximum deterrence. Your tailgater will see that there is a very real risk of being held until the police or security heavies arrive, and go somewhere else?

I did once visit a very security-minded establishment where after security, you were channelled into a visitors-only lift (elevator) with its destination floor chosen by the security desk (no buttons in that lift except "Emergency"). "OK, I'll send him up ...". I had brief visions of a dungeon in the fifth basement, or in the first circle of hell.

  • You described the same thing as the accepted answer just with different material. – schroeder Nov 20 at 13:56
  • @schroeder Not exactly. It's possible to tailgate through a turnstile unless it is operated strictly one-at-a-time, which is perceived as unfriendly. Whereas an "airlock", with or without a security desk in the middle, allows multiple visitors to present themselves at the same time, while exerting maximum psychological deterrence on a tailgater. Yes, it's defeated by a sufficiently confident and brazen tailgater, but most(?) will see the arrangement, and try their luck elsewhere. Depends on the threat, I guess. – nigel222 Nov 20 at 14:07
  • Turnstiles are meant to be one at a time, else what's the point? You cannot tailgate through them at all (unless you are tiny and can fit in the segment with someone else. Your description does not include the fact that multiple people can enter at once. I would add that part. In your deadman's trap, the tailgater would have to be trapped along with someone else, which limits the deterrent because the attacker knows there is only so much that can be done if an innocent is trapped, too. – schroeder Nov 20 at 14:29
  • You can tailgate a turnstile by tagging behind someone authorized and hoping that the turnstile operator assumes you are together. If it's token or card operated past the security desk you can try to blag a visitor card by tailgating a large group of visitors. The "airlock" operates before the security desk or as part of it. As for creating a hostage scenario ... as I said, it depends on the threat profile. Is violent escalation likely? As always, security and usability/friendliness are at odds. – nigel222 Nov 20 at 15:10
  • What is "blag"? And I never said hostage scenario, I'm saying that whatever happens in your big glass cage has to be reasonable for everyone in it, including the innocent, which lowers its threat. – schroeder Nov 20 at 15:16

Where I work, there is an outer door and inner door, and a turnstile in between. Behind the sluice we are two separate companies, so in theory there can be people inside the turnstile who are not supposed to get through the inner door. We have signs posted that say "It is not impolite to ask: 'Can I see your card' ", so we are actively encouraged to ask to see others' cards. If I am being followed, I sometimes walk slower, so that my tailgater will have to open the door, or if I opened the outer one, wait for him/her to open the inner door. Other than that, people must wear badges visibly, so it's often easy to see if people belong. (ofc you can fake a badge, but I gather that this is not a part of the question here).

I worked somewhere that had high security aria and had a few of the solutions already suggested, primarily an air lock and turnstile (it let anyone in or out). It also had it so that to be let out you have to have tapped in, because of if someone tried to tailgate everyone seeing and hearing it would know that they were up to no good.

So having it so they would have to tailgate both in and out would change how people behave with tailgaters. If the company feared a backlash they could frame it for fire safety.

The biggest downfall of it is that you end up getting lines to tap in and out especially if you also have to put a pin in.

Face recognition technology is about ready for that, and can easily handle large masses of people simultaneously, without the need for badges or turn styles.

For example, the Orlando airport is being converted to use face recognition instead of passport controls (supposedly still to go live in 2018). You will just walk by, and be automatically identified.

  • 4
    How easy is this to fool by wearing a mask or something? You can't really do that at an airport - too many people around and it would be suspicious, but what about an office building at a quiet hour or even few minutes - you put the mask on, get in, take it off when nobody is around to question you? How easy is it to get a false negative, either - if somebody grew a beard or maybe had a face injury, would they be denied access? That's lower risk than a false positive but still something to keep in mind. – vlaz Nov 17 at 8:44
  • I have my doubts too... but they seriously do that in the airport, and they should know what they do. – Aganju Nov 17 at 12:56
  • 2
    @Aganju Especially in the USA, airport security is a big theater with very little purpose. They do not know what they are doing. – Luc Nov 20 at 12:07
  • 1
    @vlaz. Those are common misunderstandings about the AI behind facial recognition. A face mask can prevent you from being IDed in a public place like an airport, but in a secure place, you are looking for negatives not positives. Facial ID software also places emphasis on what it less changing; so, if you shave your beard, or put your hair up in a ponytail, the AI does not care, because it can still id you based on eye shape, cheekbones, etc. AI is actually better at discriminating these variances better than most people are. – Nosajimiki Nov 21 at 18:08
  • Thanks @Nosajimiki - I was genuinely curious and the answer had no real detail to go on. – vlaz Nov 22 at 3:48

If you have the budget for it, use high resolution cameras with facial recognition. Security will be alerted even if some well meaning do-gooder holds the door open for them when they enter an unauthorized area.

  • 1
    Unless they duck, or face the other way... Technology is not a panacea. – wizzwizz4 Nov 17 at 18:08
  • This comes down to what level of security you are trying to enforce. Many can be configured to alert you to an unrecognized person; so, obscured faces can create false positives, but false negatives are nearly impossible. Even if you have a bag over your head, it will still mark you as an unknown person alerting security to your presence. Also, the facial recognition software that comes with them typically use machine learning; so, they learn your whole facial profile over time such that false positives become pretty rare after it's seen you a few times. – Nosajimiki Nov 19 at 15:03
  • 1
    High sensitivity is only needed with very large population pools. If your "building" has 500,000 people in it, then this is a problem, but low sensitivity on 50-200 people will create very few false negatives and a tailgater would still have to be a pretty good look-alike to an actual employee to slip by. Even at low sensitivities, modern AI has a similar facial recognition ability to a human being who actually knows every single person who's supposed to be there. Most of the stories you hear about with false positives come from using giant facial databases. – Nosajimiki Nov 19 at 18:19
  • 1
    Neither should a turngate, or card reader, or training, or any other method here listed. Security is always best when layered, but in most cases, I believe this method to be best if you had to only choose one because it minimizes the human altruism factor. – Nosajimiki Nov 19 at 18:34
  • 2
    This should at least be combined with a physical defence, like a turnstile. – wizzwizz4 Nov 19 at 18:36

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.