Safeguard surveillance devices from cyberattacks

Issue 6 2023 Surveillance, Information Security


Rudie Opperman.

Regardless of their industry, South African enterprises face significant cybersecurity challenges. Fortunately, enterprises appear to be waking up to that. According to the KPMG Africa Cyber Security Outlook, 34% of surveyed organisations have a fully independent cyber and information security function, with oversight through risk management and internal audit. In comparison, 47% have information security incorporated into IT security.

Cybersecurity concerns extend through the organisation and out among its stakeholders and supply chains. It also covers video surveillance, which is critical to any organisation’s physical security and asset protection strategy. Thanks to network video and connected technologies advancements, video surveillance is more intelligent than ever. However, it also now faces greater risks, which is why enterprises must commit to best practices and ensure their surveillance networks, data, and devices remain protected from any potential vulnerabilities and threat actors seeking to exploit them.

From analogue to digital to connected

Physical security used to be a relatively straightforward process; point a CCTV camera at the thing you want to secure and monitor the feed from a centralised location. Devices stored little to no information and were not connected to any greater network. This all changed during the digital revolution in the 1990s with the advent of the Axis NetEye 200 – the world’s first Internet Protocol camera capable of transmitting footage wirelessly over a computer network.

From there, video surveillance has only grown in technical complexity and functionality. Camera manufacturers have increased their products’ processing capabilities, effectively creating a whole solution at the network's edge, capable of gathering, analysing, and storing data at the point of capture. This yields several benefits, including the ability to place edge solutions in locations that may be logistically challenging or lacking adequate infrastructure, and also reduced labour installation and associated costs.

The trade-off of this innovation has been that cameras are no longer passive devices, but active components of greater organisational IT ecosystems. As a result, like any connected technology, they can be a point of attack for malicious actors.

The perils of cyberspace

The integration of physical security and video surveillance into greater IT networks has resulted in the sector being a potential backdoor for cyberattacks. According to Check Point Research, the first two months of 2023 saw a 41% increase in the average number of weekly attacks per organisation targeting IoT devices, compared to the same period in 2022. In addition, on average, 54% of organisations suffer from attempted cyberattacks targeting IoT devices every week.

Video surveillance devices can suffer from several cyber vulnerabilities. For example, an organisation’s IT and physical security teams may not always be aligned, meaning that there is a failure to adhere to critical shared security policies and guidelines. Security systems may also not be as well maintained or cared for as other systems, resulting in them being more susceptible to intrusions by threat actors.

The risk of these vulnerabilities is measured according to two factors: the probability of a vulnerability being exploited and the impact that that exploitation may have on the rest of the system. Threat actors are getting smarter and have access to advanced technologies such as artificial intelligence (AI) to develop malware and phishing-based strategies. Organisations need to take these threats seriously, and they can do that by adhering to effective best practices when protecting their networks.

Resiliency, efficiency, and performance

Video surveillance networks can range from a single pair of devices to an expansive network made up of dozens, if not hundreds, of interconnected devices. Administrators can face a mammoth task in reinforcing the resiliency of those networks and need access to the right knowledge and tools to maintain efficiency and meet security standards and obligations.

Organisations can take the following steps to ensure the resiliency of their video surveillance devices and networks:

• Keep a complete device inventory: Instead of just prioritising critical assets, organisations should retain clear documentation and information about all devices connected to their networks. Effective device management also means organisations can efficiently troubleshoot or replace devices that may be discontinued by their manufacturer, or no longer receive software support.

• Establish a user account and password policy: Device login details and passwords are commonly shared throughout an organisation, which may result in deliberate or accidental misuse. The solution is to create a multi-layered system of accounts with varying levels of user privilege, as well as user temporary accounts to grant temporary access as required.

• Utilise cost-efficient HTTPS management: Video systems may be subject to regulations regarding traffic encryption between clients, which itself is an important tool for network resiliency. Device management software that manages certificates and HTTPS configuration can both reduce costs and ensure a trusted connection.

• Awareness and mitigation: Organisations must adopt a continuous learning and improvement mentality when it comes to cybersecurity readiness, as well as enshrine a culture of security across their personnel and departments. In addition, they must work with vendors and supply chain partners that have a proven cyber maturity record.

These steps form part of a holistic approach to taking care of your devices. As more enterprises in South Africa leverage the power of video surveillance to secure and improve their business functions, they must also consider the security implications of digital devices.

Resources

- https://www.securitysa.com/*kpmg3

- https://www.axis.com/blog/secure-insights/what-are-the-cybersecurity-issues-in-video-surveillance/

- https://www.deepsentinel.com/blogs/home-security/history-of-surveillance-cameras

- https://www.axis.com/blog/secure-insights/edge-surveillance-solutions/

- https://www.securitysa.com/*checkpoint1

- https://www.axis.com/blog/secure-insights/video-surveillance-secure/


Credit(s)




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Pentagon appointed as Milestone distributor
Elvey Security Technologies News & Events Surveillance
Milestone Systems appointed Pentagon Distribution (an Elvey Group company within the Hudaco Group of Companies) as a distributor. XProtect’s open architecture means no lock-in and the ability to customise the connected video solution that will accomplish the job.

Read more...
SMART and secure estates in Cape Town
Technews Publishing Axis Communications SA Gallagher DeepAlert Nemtek Electric Fencing Products Editor's Choice
In February 2024, SMART Security Solutions emigrated to the Western Cape to host its first SMART Estate Security Conference in the region in many years. For the day, we took over the prestigious D’Aria Wine Estate.

Read more...
SMART Estate Security returns to KZN
Nemtek Electric Fencing Products Technews Publishing Axis Communications SA OneSpace Editor's Choice News & Events Integrated Solutions IoT & Automation
The second SMART Estate Security Conference of 2024 was held in May in KwaZulu-Natal at the Mount Edgecombe Estate Conference Centre, which is located on the Estate’s pristine golf course.

Read more...
Horn speakers from Sunell
Forbatt SA Products & Solutions Surveillance Residential Estate (Industry)
Horn speakers are an effective tool for actively deterring intruders from entering estates. By emitting loud, clear audio warnings, horn speakers can alert trespassers that they have been detected and are being monitored.

Read more...
Sunell’s range of thermal cameras
Forbatt SA Products & Solutions Surveillance Residential Estate (Industry)
Thermal cameras offer significant value to estate security. Their ability to provide reliable surveillance in all lighting and weather conditions ensures continuous monitoring, providing a constant sense of security and reducing the likelihood of security breaches.

Read more...
Integrating radar and surveillance
Forbatt SA Products & Solutions Surveillance Residential Estate (Industry)
Integrating radar with CCTV video systems significantly enhances estate security by providing long-range threat detection and comprehensive monitoring capabilities. This combination leverages the strengths of both technologies, offering several key benefits.

Read more...
Sunell anti-corrosion cameras
Forbatt SA Products & Solutions Surveillance Residential Estate (Industry)
With Sunell’s anti-corrosion range of cameras, the initial investment in anti-corrosion CCTV cameras may be higher than standard cameras, but the long-term benefits outweigh the upfront costs.

Read more...
Latest AI solution to manage guards
DeepAlert Products & Solutions Surveillance AI & Data Analytics
No guard at the guardhouse? Guard under duress? Guard asleep? DeepAlert’s AI technology delivers real-time alerts to mobile phones and video management systems, helping you manage your guards more effectively.

Read more...
Axis advanced radar system
Axis Communications SA Products & Solutions Surveillance Residential Estate (Industry)
The Axis D2210-VE also offers a radar-video fusion model, combining the strengths of both technologies to provide comprehensive monitoring and enhanced situational awareness.

Read more...
Using KPIs to measure smart city progress
Axis Communications SA Residential Estate (Industry) Integrated Solutions Security Services & Risk Management
United 4 Smart Sustainable Cities is a United Nations Initiative that encourages the use of information and communication technology (including security technology) to support a smooth transition to smart cities.

Read more...