Securing your surveillance

CCTV Handbook 2018 Cyber Security, CCTV, Surveillance & Remote Monitoring, Integrated Solutions

IT security used to be about securing your PC with an antivirus package and not putting any strange disks in your drives. That has changed dramatically over the years and today there is no industry that uses electronics that does not have to cater for cybersecurity defence in their budget. Physical security and, in particular, surveillance is no different.

Hi-Tech Security Solutions wanted to know what your average company can do to secure their surveillance infrastructure from the various threats out there.

We approached two companies in the security industry to give us an insight into cybersecurity in the physical security world. We went to a physical security stalwart who has been in the news over the past few months specifically with respect to cybersecurity, Genetec; as well as a traditional cybersecurity company that has also been in the news over the past few months as a result of some American politicians panicking that the Russians are on their doorstep, Kaspersky.

We started out asking our two interviewees what cybersecurity means in terms of surveillance technology and installations. Specifically, what is at risk and how do you protect it?

Brent Cary, regional sales manager, sub-Saharan Africa for Genetec, says a hacker doesn’t see a camera as a specialised surveillance device, they see it as a computer with a lens sending video packets over a network, which means they can use the same attack techniques as they do for other networked computers.

“Therefore, generally speaking, the cyber defence used in the IT world can be applied to defend the systems in the surveillance industry. The risks are also similar, namely: unauthorised access to a device, confidentiality breach of sensitive data, denial of service of systems and tampering of data.

Denis Legezo, technology positioning manager at Kaspersky Lab adds, “if we are speaking about web cameras along with routers and digital videos recorders (which could also be a part of surveillance systems), they are one of the most popular embedded devices to infect. The reason is simple. Despite their low computing power, these devices are typically on-line 24/7.

As such, it’s almost the perfect situation for the botnet’s host, which waits for a command to start a DDoS-attack.” So what can be done?

Legezo explains that only top-notch cyber-criminal actors will search for the famed zero-day exploits in embedded devices. Most malefactors will scan your devices multiple times per day trying to find known passwords or vulnerabilities. And some still succeed with such tactics. Kaspersky advise owners of IoT devices, which includes users who have surveillance installed, to firstly change the passwords of their devices to one that’s difficult to compromise by brute force (which means that passwords like ‘password’, ‘12345’, ‘qwerty’ or ‘password123’, and other favourites are taboo). Secondly, he encourages users to ensure their surveillance devices (cameras, recorders, network switches etc.) are all running the latest firmware.

Cary’s agrees, noting that the first step is to complete a risk assessment. “This means you have to define what you care about and what you want to defend against.”

The second step is to make sure that those risks are addressed. This generally involves implementing some security controls, and in the majority of cases in the physical security industry, basic IT practices are used. Some examples can include: changing the default passwords of cameras, applying the latest patches supplied by the manufacturers, updating device firmware and using a secure communication protocol like HTTPS.

Technical assistance

An IT expert may take the advice above and be quite happy implementing it, but what about the rest of us who have no time to research all the ins and outs of the cybersecurity world? We still need to be secure, but we need assistance, preferably in the form of standard tools or practices that will help us in protecting our surveillance infrastructure.

Cary says there is help at hand. Depending on your particular context, you can apply many tools. One example he gives is Microsoft’s Security Compliance Manager which offers a set of security configurations for almost all versions of Windows. This can be used to harden the windows image running your VMS software.

He adds, “You should be working with reputable manufacturers who are offering features and tools in their platform focused on the ‘security of security’ and come secure by design. ‘System Integrators’ skills sets have had to evolve with the rest of the physical security industry. Today, it is crucial for an SI to not only understand how IP networks are designed and configured, but they should also have skills in and be offering the industry’s best information security practices.”

Additionally, employees need to have incident response skills in case of infection to ensure they are able to find the vulnerability and close it for future usage, notes Legezo.

What do they do?

To end the discussion, we asked our interviewees what their company does in terms of security in the surveillance market.

“We do not play significantly in the hardware market and as such, we cannot answer these questions with authority,” answers Legezo. “We are mostly into security software and in our own field timely updates of heuristic and behavioural rules to detect malicious activity are absolutely crucial.”

As far as Genetec is concerned, Cary says multiple security functions are included in Genetec Security Center. These include:

• A Password Strength Metre and Password Composition Rule to make sure users are using strong passwords.

• Genetec’s authorisation feature is a comprehensive privilege system to assign specific users only the access rights they need.

• Genetec’s usage of cryptographically strong protocols to protect the confidentiality and integrity of data, including video and audio data while in transit and at rest, are leading the physical security industry. Protocols used include HTTPS, TLS, and SRTP.

In addition, he says Security Center updates can be set to update automatically. “We also have a new feature created explicitly for updating vulnerable cameras in the new Security Center 5.7. This feature scans the firmware used by cameras in our VMS and compares it against a database of firmware that have known vulnerabilities. If a vulnerable firmware is detected on our platform, we will alert the user and suggest an update for the specific camera.

“These advanced features as well as simple features you find in Windows, such as Auto-Locking of inactive sessions, ensure Genetec is secure by design,” he concludes.





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Retail solutions beyond security
Issue 8 2020, Axis Communications SA, Technews Publishing, Hikvision South Africa , Editor's Choice, CCTV, Surveillance & Remote Monitoring
The need for security technology to deliver more than videos of people falling or stealing from retail stores is greater than ever.

Read more...
AI-powered hardhat detection
Issue 8 2020, Hikvision South Africa , Industrial (Industry), CCTV, Surveillance & Remote Monitoring
Hardhats save lives, but only if people wear them. Intelligent, AI-powered hardhat cameras are helping to ensure workers in dangerous locations stay safe at all times.

Read more...
Securing access to the data centre
Issue 1 2021, Suprema , Cyber Security
When looking for a solution to securing your data centre, FaceStation F2 stands out in terms of its versatility, security and rich feature offering.

Read more...
Secure alternative to passwords
Issue 1 2021, Suprema , Cyber Security
Fingerprint biometrics offer a secure alternative to regular passwords; they cannot be lost/forgotten and cannot be shared.

Read more...
Information visibility is key for brand protection
Issue 1 2021 , Cyber Security
High-value employees now give away more information in the social media age than ever before and businesses need a solution that will immediately block, hide or remove racial slurs, sensitive data like credit card numbers, competitor posts, scams, malicious links and more.

Read more...
‘Broken window, broken business’ and cybersecurity
Issue 1 2021 , Cyber Security
Apply the broken window principle to ensure there are no gaps in your cybersecurity that allow criminals into your network.

Read more...
Further exit of skills possible
Issue 1 2021, Galix Group , Cyber Security
Lifting international travel restrictions could have a severe impact on South Africa’s already depleted cybersecurity skills pool.

Read more...
A new security approach for the modern network
Issue 1 2021 , Cyber Security
In a digitally transforming world, the traditional firewall is no longer as effective as it used to be.

Read more...
Cybersecurity in 2020: lessons for tomorrow
Issue 1 2021 , Cyber Security
There is a visible jump in awareness around online security, precisely because of the remote working trend that became a reality in 2020.

Read more...
Small business security trends for 2021
Issue 1 2021 , Cyber Security
Recent surveys suggest that many small business owners are still operating under a false sense of cybersecurity.

Read more...