Resolving the security threat

September 2012 Information Security

The advent of wireless networking and the wireless transmission of data have brought the benefits of convenience, flexibility and significantly lower installation costs to the video surveillance industry. However, there is more to wireless technology than wireless CCTV cameras and cable-free IP (Internet Protocol) surveillance. There is the dark side of potential security breaches, usually perpetrated by laptop toting war drivers looking for unprotected or unencrypted networks to hack into.

A wireless surveillance network could present those intent on gaining unauthorised access to a corporate network with an ideal gateway, allowing them to hook up to the network and its often geographically dispersed servers and copy-sensitive data, steal identities or commit any number of fraudulent acts, including the placement of sniffer software and other malware.

Unfortunately, many organisations pay little attention to the security of the video surveillance network, probably in the mistaken belief that the modern wireless version – now connected to the corporate network – represents as little threat as the old, replaced, analogue system.

That said, high-quality megapixel resolution digital cameras and network-based IP cameras represent realistic options for new-generation security projects, which can include building management and access control, because of the considerable benefits their technology brings to the process. These include motion detection, behaviour recognition and thermal/infrared imaging for low-light conditions as well as the option to integrate other IP-based intrusion detection systems, complemented by a variety of active and passive alarms and customisable control methods.

However relevant and important these features, they must never be allowed to override the need for security protection.

Securing wireless

The first step towards ensuring the security of a wireless infrastructure is data encryption which encodes the information transmitted over the infrastructure. It is advisable to use the strongest form supported by the network. The Wireless Protected Access (WPA) protocol and more recent WPA2 have supplanted the older and less-secure Wireless Encryption Protocol (WEP).

One of the best ways to protect a wireless network and its links is through the use of a virtual private network (VPN). VPNs secure communications by creating impenetrable tunnels through which the encrypted data travels. Many companies provide VPN service to their mobile and offsite workers and similar services can be adopted for surveillance systems too.

An important step in the process is to establish control over the network to authorise, limit or block access to the infrastructure based on authentication, location and needs assessments. The network management solution selected to perform these tasks should have the ability to correlate and sort large volumes of threat data while providing complete visibility and control of the security environment. It should also deliver compliance enablement and, if possible, support an audit process while providing open interoperability with third party devices.

Threat management

Leading systems today offer an array of forensic tools together with native voice over IP support and the ability to upgrade or combine intrusion detection systems (IDS) and intrusion prevention systems (IPS) in the same application and within the same appliance.

Several methods can be used to detect threats, including signature-based and anomaly-based detection as well as stateful protocol analysis – the process of comparing predetermined profiles of generally accepted definitions of benign protocol activity for each protocol state against observed events to identify deviations.

With these defences in place, it is safe to integrate wireless networks into a broad-based business communications infrastructure. In fact, the trend towards converged, multi-service networks is very much part of today’s corporate landscape as organisations move to rationalise technology spending by permitting voice, video and data to run over a common communications infrastructure.

While networks continue to grow organically, some have evolved into convoluted technology nightmares. However, it is possible to plan a strategy that ensures service level targets set by an organisation’s user community are equally met by data, voice and video systems – including video surveillance systems – without undue complexity or cost.

Martin May
Martin May

For more information contact Enterasys Networks, +27 (0)11 531 9600, [email protected], www.enterasys.com





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

New ransomware using BitLocker to encrypt data
Technews Publishing Information Security Residential Estate (Industry)
Kaspersky has identified ransomware attacks using Microsoft’s BitLocker to attempt encryption of corporate files. It can detect specific Windows versions and enable BitLocker according to those versions.

Read more...
Create order from chaos
Information Security
The task of managing and interpreting vast amounts of data is akin to finding a needle in a haystack. Cyberthreats are growing in complexity and frequency, demanding sophisticated solutions that not only detect, but also prevent, malicious activities effectively.

Read more...
Trend Micro launches first security solutions for consumer AI PCs
Information Security News & Events
Trend Micro unveiled its first consumer security solutions tailored to safeguard against emerging threats in the era of AI PCs. Trend will bring these advanced capabilities to consumers in late 2024.

Read more...
Kaspersky finds 24 vulnerabilities in biometric access systems
Technews Publishing Information Security
Customers urged to update firmware. Kaspersky has identified numerous flaws in the hybrid biometric terminal produced by international manufacturer ZKTeco, allowing a nefarious actor to bypass the verification process and gain unauthorised access.

Read more...
Responsible AI boosts software security
Information Security
While the prevalence of high-severity security flaws in applications has dropped slightly in recent years, the risks posed by software vulnerabilities remain high, and remediating these vulnerabilities could hinder new application development.

Read more...
AI and ransomware: cutting through the hype
AI & Data Analytics Information Security
It might be the great paradox of 2024: artificial intelligence (AI). Everyone is bored of hearing it, but we cannot stop talking about it. It is not going away, so we had better get used to it.

Read more...
NEC XON shares lessons learned from ransomware attacks
NEC XON Editor's Choice Information Security
NEC XON has handled many ransomware attacks. We've distilled key insights and listed them in this article to better equip companies and individuals for scenarios like this, which many will say are an inevitable reality in today’s environment.

Read more...
iOCO collaboration protection secures Office 365
Information Security Infrastructure
The cloud, in general, and Office 365, in particular, have played a significant role in enabling collaboration, but it has also created a security headache as organisations store valuable information on the platform.

Read more...
Cybercriminals embracing AI
Information Security Security Services & Risk Management
Organisations of all sizes are exploring how artificial intelligence (AI) and generative AI, in particular, can benefit their businesses. While they are still figuring out how best to use AI, cybercriminals have fully embraced it.

Read more...
A strong cybersecurity foundation
Milestone Systems Information Security
The data collected by cameras, connected sensors, and video management software can make a VMS an attractive target for malicious actors; therefore, being aware of the risks of an insecure video surveillance system and how to mitigate these are critical skills.

Read more...