Safeguard surveillance devices from cyberattacks

Issue 6 2023 Surveillance, Information Security

Rudie Opperman.

Regardless of their industry, South African enterprises face significant cybersecurity challenges. Fortunately, enterprises appear to be waking up to that. According to the KPMG Africa Cyber Security Outlook, 34% of surveyed organisations have a fully independent cyber and information security function, with oversight through risk management and internal audit. In comparison, 47% have information security incorporated into IT security.

Cybersecurity concerns extend through the organisation and out among its stakeholders and supply chains. It also covers video surveillance, which is critical to any organisation’s physical security and asset protection strategy. Thanks to network video and connected technologies advancements, video surveillance is more intelligent than ever. However, it also now faces greater risks, which is why enterprises must commit to best practices and ensure their surveillance networks, data, and devices remain protected from any potential vulnerabilities and threat actors seeking to exploit them.

From analogue to digital to connected

Physical security used to be a relatively straightforward process; point a CCTV camera at the thing you want to secure and monitor the feed from a centralised location. Devices stored little to no information and were not connected to any greater network. This all changed during the digital revolution in the 1990s with the advent of the Axis NetEye 200 – the world’s first Internet Protocol camera capable of transmitting footage wirelessly over a computer network.

From there, video surveillance has only grown in technical complexity and functionality. Camera manufacturers have increased their products’ processing capabilities, effectively creating a whole solution at the network's edge, capable of gathering, analysing, and storing data at the point of capture. This yields several benefits, including the ability to place edge solutions in locations that may be logistically challenging or lacking adequate infrastructure, and also reduced labour installation and associated costs.

The trade-off of this innovation has been that cameras are no longer passive devices, but active components of greater organisational IT ecosystems. As a result, like any connected technology, they can be a point of attack for malicious actors.

The perils of cyberspace

The integration of physical security and video surveillance into greater IT networks has resulted in the sector being a potential backdoor for cyberattacks. According to Check Point Research, the first two months of 2023 saw a 41% increase in the average number of weekly attacks per organisation targeting IoT devices, compared to the same period in 2022. In addition, on average, 54% of organisations suffer from attempted cyberattacks targeting IoT devices every week.

Video surveillance devices can suffer from several cyber vulnerabilities. For example, an organisation’s IT and physical security teams may not always be aligned, meaning that there is a failure to adhere to critical shared security policies and guidelines. Security systems may also not be as well maintained or cared for as other systems, resulting in them being more susceptible to intrusions by threat actors.

The risk of these vulnerabilities is measured according to two factors: the probability of a vulnerability being exploited and the impact that that exploitation may have on the rest of the system. Threat actors are getting smarter and have access to advanced technologies such as artificial intelligence (AI) to develop malware and phishing-based strategies. Organisations need to take these threats seriously, and they can do that by adhering to effective best practices when protecting their networks.

Resiliency, efficiency, and performance

Video surveillance networks can range from a single pair of devices to an expansive network made up of dozens, if not hundreds, of interconnected devices. Administrators can face a mammoth task in reinforcing the resiliency of those networks and need access to the right knowledge and tools to maintain efficiency and meet security standards and obligations.

Organisations can take the following steps to ensure the resiliency of their video surveillance devices and networks:

• Keep a complete device inventory: Instead of just prioritising critical assets, organisations should retain clear documentation and information about all devices connected to their networks. Effective device management also means organisations can efficiently troubleshoot or replace devices that may be discontinued by their manufacturer, or no longer receive software support.

• Establish a user account and password policy: Device login details and passwords are commonly shared throughout an organisation, which may result in deliberate or accidental misuse. The solution is to create a multi-layered system of accounts with varying levels of user privilege, as well as user temporary accounts to grant temporary access as required.

• Utilise cost-efficient HTTPS management: Video systems may be subject to regulations regarding traffic encryption between clients, which itself is an important tool for network resiliency. Device management software that manages certificates and HTTPS configuration can both reduce costs and ensure a trusted connection.

• Awareness and mitigation: Organisations must adopt a continuous learning and improvement mentality when it comes to cybersecurity readiness, as well as enshrine a culture of security across their personnel and departments. In addition, they must work with vendors and supply chain partners that have a proven cyber maturity record.

These steps form part of a holistic approach to taking care of your devices. As more enterprises in South Africa leverage the power of video surveillance to secure and improve their business functions, they must also consider the security implications of digital devices.









Share this article:
Share via emailShare via LinkedInPrint this page

Further reading:

Pentagon appointed as Milestone distributor
Elvey Security Technologies News & Events Surveillance
Milestone Systems appointed Pentagon Distribution (an Elvey Group company within the Hudaco Group of Companies) as a distributor. XProtect’s open architecture means no lock-in and the ability to customise the connected video solution that will accomplish the job.

Embracing next-generation surveillance for safer cities
Surveillance Integrated Solutions AI & Data Analytics
With the South African government highlighting the importance of building smart cities by integrating advanced technologies to make them more resilient and liveable, the role of next-generation network video and surveillance technologies cannot be ignored.

Hik-Connect for Teams released
Hikvision South Africa Products & Solutions Surveillance
Hikvision has released an update for its security management platform; Hik-Connect for Teams not only meets the specific needs of individual users, but also caters to various medium-sized businesses (SMBs) and multi-site management scenarios.

The human factor side of video management systems
Leaderware Editor's Choice Surveillance Risk Management & Resilience
A video management system (VMS) is central to, and the most vital element to any control room operation using CCTV as part of its service delivery, however, all too often, it is seen as a technical solution rather than an operational solution.

A simple system for complex protection
Surveillance AI & Data Analytics IoT & Automation
Reconeyez is a company that provides autonomous wireless visual verification systems with built-in artificial intelligence. Running on batteries, each device includes communication capabilities, creating a mesh network between the various devices, linking them to the control room.

Revolutionise your security with integrated solutions
Secutel Technologies Products & Solutions Surveillance
By merging the capabilities of SecuVue and Secutraq, Secutel has forged a robust system empowering users to fine-tune analytics and harness facial recognition, pose detection, and XFS, among other features.

All aspects of data protection
Technews Publishing Editor's Choice Information Security Infrastructure AI & Data Analytics
SMART Security Solutions spoke to Kate Mollett, Senior Director, Commvault Africa, about the company and its evolution from a backup specialist to a full data protection specialist, as well as the latest announcements from the company.

Projections for 2024’s Advanced Threats Landscape
News & Events Information Security
Kaspersky Global Research and Analysis Team (GReAT) experts offer insights and projections for 2024 in the Kaspersky Security Bulletin, with a focus on the evolution of Advanced Persistent Threats (APT).

Edge could help transform South Africa’s healthcare
Axis Communications SA Infrastructure
Edge computing has emerged as a game-changing technology for many industries, and the healthcare sector is no exception. In particular, South Africa’s healthcare industry could significantly benefit from the potential of this technology.

Safer roads to a sustainable future
Dahua Technology South Africa Surveillance
With the ever-increasing number of vehicles on the road, it is imperative to constantly improve the quality of transportation monitoring and traffic management in urban and rural areas.