Cybersecure surveillance cameras

Issue 4 2022 News & Events, Surveillance, Information Security

CCTV devices play a critical role in keeping people and organisations safe, from transport hubs, retailers, banks and critical infrastructure to private homes and small offices. Originally used strictly for video surveillance, organisations increasingly rely on CCTV cameras as a broader security and operational management tool.

In the past, CCTV cameras were like many other Internet of Things (IoT) devices. Compact, with limited processing power and bandwidth, they primarily fed audio and video data to a control centre for monitoring.

Cameras were usually installed on proprietary, stand-alone networks. However, as IP-based cameras are increasingly connected to organisations’ networks, they expand the cyberattack surface. With little- or no- onboard security and no way to install agents, these devices have become prime targets for cybercriminals.

“Up to 85% of all CCTV products installed never have the default username and password changed,” said Yonatan Pick, chief technology officer at Provision-ISR. “They’re an open door for cyber attackers to enter an organisation’s network.”

Highly publicised security breaches stemming from hacks of security cameras, baby monitors, and other IoT devices have increased customers’ privacy awareness. As a result, Provision-ISR decided to take a new approach to cybersecurity for its products.

Provision-ISR is an Israeli multinational company that provides high-quality, IP-connected CCTV products. Its innovative products offer solutions ranging from cost-effective, single-device installations to fleet implementations of enterprise-class cameras.

“At Provision-ISR, we want to lead from the front with 100% secure CCTV devices that will give customers peace of mind,” “We needed an optimised threat solution with an extremely small footprint that would be completely reliable. This is where Check Point comes in.”

Combining expertise

Adding strong cybersecurity features as a natural evolution of its products made perfect sense. As an IP camera and video expert, Provision-ISR also wanted to team with an expert in security.

“We looked for a company with mature, industry-leading technology, a strong cybersecurity market presence, and proven experience,” said Pick. “We decided to entrust cybersecurity of our CCTV devices to Check Point. With an end-to-end cybersecurity solution on Provision-ISR devices, we are set to create a new standard for CCTV cybersecurity.”

The Provision-ISR team chose the Check Point Quantum IoT Protect Nano Agent, which offers embedded runtime protection and enables them to create connected cameras with built-in firmware security that defends against cyberattacks. IoT Protect Nano Agent prevents attacks, assesses risks in IoT device firmware, and hardens devices with granular policy definition and enforcement.

Based on cutting-edge control flow integrity technology, the lightweight IoT Protect Nano Agent fends off the most sophisticated device attacks. It closes the door to shell injections, memory corruption, and control flow hijacking regardless of where attacks are or how they are deployed. IoT Protect Nano Agent provides 100% firmware coverage, including third-party components, without compromising device performance. It can also uncover the security posture of the device’s native firmware, including unknown vulnerabilities, giving manufacturers the insight they need to identify and remediate security gaps.

Combined with Check Point Infinity Next security management, IoT Protect Nano Agent enables manufacturers and device customers to harden devices. Infinity NEXT supports assets across the network, endpoints, mobile devices, cloud, workloads and IoT, providing the highest level of security. It enables users to set granular security policies for devices protected by the Nano Agent. With full reporting, logging and alerting capabilities, customers can integrate data with their SIEMs to enforce policy and manage IoT devices from a single console.

Benefits to customers

Smart security

Pick describes the integrated camera and security capabilities as an advanced immune system. The camera understands its own code functions. IoT Protect Nano Agent enables the camera to recognise when something tries to enter with a different language or behaviour, even if it has never been seen before, and immediately shuts the door. Runtime protection not only protects against vulnerabilities and prevents zero-day attacks, but it also applies what it learns to block operations in the future.

Efficient, painless protection

Built-in security and advanced protection make it fast and painless for installers to deploy secure new cameras and systems. Customers can easily manage their devices and security from a web or mobile interface, with access from anywhere at any time. Industry-leading IoT on-device runtime protection with threat intelligence enables Provision-ISR to continue delivering innovative solutions with high-quality video and no impact on performance.

Teamwork works

Quantum IoT Protect Nano Agent reinvents IoT device security. Provision-ISR does not have to add costly CPU resources, device size or complexity to its products. At the same time, it effectively addresses customers’ concerns about privacy and device security with the ability to access continuous threat intelligence that benefits their entire security posture.

“Our partnership with Check Point enables us to be a leader in the CCTV market and include leading-edge security in our IP surveillance products,” said Pick. “As an industry leader, Check Point’s objective expertise enables us to build customer trust. Our customers gain unprecedented protection. This is a win-win situation for everyone.”


In a nutshell

Organisation

-ISR provides high-quality CCTV products that help keep customers safe and ensure their privacy.

Challenge

• Address security vulnerabilities associated with IP security cameras and other IoT devices.

• Enable customers to address privacy issues and cybersecurity challenges.

• Add leading-edge security capabilities to devices with limited CPU and bandwidth capacity efficiency.

Solution

• Check Point Quantum IoT Protect with Nano Agent.

• Check Point Infinity Next.

Benefits

• Market-leading cybersecurity embedded into high-quality IP cameras for secure CCTV products right out of the box.

• Gives customers leading-edge security defences to maintain privacy and reduce risk.

• Simplifies the installation of innovative, secure IP cameras without the worry of vulnerabilities.


Credit(s)




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Pentagon appointed as Milestone distributor
Elvey Security Technologies News & Events Surveillance
Milestone Systems appointed Pentagon Distribution (an Elvey Group company within the Hudaco Group of Companies) as a distributor. XProtect’s open architecture means no lock-in and the ability to customise the connected video solution that will accomplish the job.

Read more...
From the editor's desk: Securing your secure access
Technews Publishing News & Events
      Welcome to SMART Security Solutions’ first print publication of the year, the SMART Access & Identity Handbook 2024. In this issue, we cover various issues relevant to this industry, from digital to ...

Read more...
Access & identity expectations for 2024
Technews Publishing IDEMIA ZKTeco Gallagher Salto Systems Africa Regal Distributors SA Reditron Editor's Choice Access Control & Identity Management Information Security AI & Data Analytics
What does 2024 have in store for the access and identity industry? SMART Security Solutions asked several industry players for their brief thoughts on what they expect this year.

Read more...
International access manufacturer sets up shop in SA
Technews Publishing Access Control & Identity Management News & Events Products & Solutions
The South African security market can always use some good news, and this year, STid has obliged by formally entering the South African market, setting up its main office in the Boomgate Experience Centre in Roodepoort, Johannesburg.

Read more...
Zero Trust and user fatigue
Access Control & Identity Management Information Security
Paul Meyer, Security Solutions Executive, iOCO OpenText, says implementing Zero Trust and enforcing it can create user fatigue, which only leads to carelessness and a couldn’t care attitude.

Read more...
Passwordless, unphishable web browsers
Access Control & Identity Management Information Security
Passkey technology is proving to be an easily deployed way to bring unphishable, biometric-based security to browsers; making identification and authentication much more secure and reliable for all parties.

Read more...
Re-introduction of the booking system
PSiRA (Private Security Ind. Regulatory Authority) News & Events
[Sponsored] PSiRA is reintroducing the booking system for branch visits. Effective Monday, 4 December 2023, clients will be required to book a slot to visit any PSiRA branch.

Read more...
From the editor's desk: A sad but exciting goodbye
Technews Publishing News & Events
Welcome to the final monthly issue of SMART Security Solutions. This is the last issue of the year and the last monthly issue we will print. The SMART Security Solutions team wishes all our readers and advertisers a relaxing festive season and a peaceful and prosperous 2024.

Read more...
Regal celebrates successful golf day
Regal Distributors SA News & Events
Regal Distributors held its first official Regal Golf Day on 18 October at the Glendower Golf Course in Johannesburg. SMART Security Solutions was there on a hot summer’s day to meet many players and sponsors around the course.

Read more...
Gallagher Security releases Command Centre v9
Gallagher News & Events Access Control & Identity Management Integrated Solutions
Richer features, greater integrations, with the release of Gallagher Security’s Command Centre v9 security site management software designed to integrate seamlessly with various systems and hardware.

Read more...