classic | mobile
Follow us on:
Follow us on Facebook  Share via Twitter  Share via LinkedIn
 

Search...
Hi-Tech Security Solutions Business Directory
Residential Estate Security Handbook 2018


Securing your surveillance
April 2018, Cyber Security, CCTV, Surveillance & Remote Monitoring, Integrated Solutions

IT security used to be about securing your PC with an antivirus package and not putting any strange disks in your drives. That has changed dramatically over the years and today there is no industry that uses electronics that does not have to cater for cybersecurity defence in their budget. Physical security and, in particular, surveillance is no different.

Hi-Tech Security Solutions wanted to know what your average company can do to secure their surveillance infrastructure from the various threats out there.

We approached two companies in the security industry to give us an insight into cybersecurity in the physical security world. We went to a physical security stalwart who has been in the news over the past few months specifically with respect to cybersecurity, Genetec; as well as a traditional cybersecurity company that has also been in the news over the past few months as a result of some American politicians panicking that the Russians are on their doorstep, Kaspersky.

We started out asking our two interviewees what cybersecurity means in terms of surveillance technology and installations. Specifically, what is at risk and how do you protect it?

Brent Cary, regional sales manager, sub-Saharan Africa for Genetec, says a hacker doesn’t see a camera as a specialised surveillance device, they see it as a computer with a lens sending video packets over a network, which means they can use the same attack techniques as they do for other networked computers.

“Therefore, generally speaking, the cyber defence used in the IT world can be applied to defend the systems in the surveillance industry. The risks are also similar, namely: unauthorised access to a device, confidentiality breach of sensitive data, denial of service of systems and tampering of data.

Denis Legezo, technology positioning manager at Kaspersky Lab adds, “if we are speaking about web cameras along with routers and digital videos recorders (which could also be a part of surveillance systems), they are one of the most popular embedded devices to infect. The reason is simple. Despite their low computing power, these devices are typically on-line 24/7.

As such, it’s almost the perfect situation for the botnet’s host, which waits for a command to start a DDoS-attack.” So what can be done?

Legezo explains that only top-notch cyber-criminal actors will search for the famed zero-day exploits in embedded devices. Most malefactors will scan your devices multiple times per day trying to find known passwords or vulnerabilities. And some still succeed with such tactics. Kaspersky advise owners of IoT devices, which includes users who have surveillance installed, to firstly change the passwords of their devices to one that’s difficult to compromise by brute force (which means that passwords like ‘password’, ‘12345’, ‘qwerty’ or ‘password123’, and other favourites are taboo). Secondly, he encourages users to ensure their surveillance devices (cameras, recorders, network switches etc.) are all running the latest firmware.

Cary’s agrees, noting that the first step is to complete a risk assessment. “This means you have to define what you care about and what you want to defend against.”

The second step is to make sure that those risks are addressed. This generally involves implementing some security controls, and in the majority of cases in the physical security industry, basic IT practices are used. Some examples can include: changing the default passwords of cameras, applying the latest patches supplied by the manufacturers, updating device firmware and using a secure communication protocol like HTTPS.

Technical assistance

An IT expert may take the advice above and be quite happy implementing it, but what about the rest of us who have no time to research all the ins and outs of the cybersecurity world? We still need to be secure, but we need assistance, preferably in the form of standard tools or practices that will help us in protecting our surveillance infrastructure.

Cary says there is help at hand. Depending on your particular context, you can apply many tools. One example he gives is Microsoft’s Security Compliance Manager which offers a set of security configurations for almost all versions of Windows. This can be used to harden the windows image running your VMS software.

He adds, “You should be working with reputable manufacturers who are offering features and tools in their platform focused on the ‘security of security’ and come secure by design. ‘System Integrators’ skills sets have had to evolve with the rest of the physical security industry. Today, it is crucial for an SI to not only understand how IP networks are designed and configured, but they should also have skills in and be offering the industry’s best information security practices.”

Additionally, employees need to have incident response skills in case of infection to ensure they are able to find the vulnerability and close it for future usage, notes Legezo.

What do they do?

To end the discussion, we asked our interviewees what their company does in terms of security in the surveillance market.

“We do not play significantly in the hardware market and as such, we cannot answer these questions with authority,” answers Legezo. “We are mostly into security software and in our own field timely updates of heuristic and behavioural rules to detect malicious activity are absolutely crucial.”

As far as Genetec is concerned, Cary says multiple security functions are included in Genetec Security Center. These include:

• A Password Strength Metre and Password Composition Rule to make sure users are using strong passwords.

• Genetec’s authorisation feature is a comprehensive privilege system to assign specific users only the access rights they need.

• Genetec’s usage of cryptographically strong protocols to protect the confidentiality and integrity of data, including video and audio data while in transit and at rest, are leading the physical security industry. Protocols used include HTTPS, TLS, and SRTP.

In addition, he says Security Center updates can be set to update automatically. “We also have a new feature created explicitly for updating vulnerable cameras in the new Security Center 5.7. This feature scans the firmware used by cameras in our VMS and compares it against a database of firmware that have known vulnerabilities. If a vulnerable firmware is detected on our platform, we will alert the user and suggest an update for the specific camera.

“These advanced features as well as simple features you find in Windows, such as Auto-Locking of inactive sessions, ensure Genetec is secure by design,” he concludes.


  Share via Twitter   Share via LinkedIn      

Further reading:

  • Is everything-as-a-service worth it?
    April 2019, iPulse Systems, Verifier, CCTV, Surveillance & Remote Monitoring, Integrated Solutions
    Security-as-a-service seems like a good idea to reduce technology and labour expenses. Hi-Tech Security Solutions find out more.
  • Watching the game
    April 2019, Technews Publishing, Pelco by Schneider Electric, Dallmeier Electronic Southern Africa , Entertainment and Hospitality (Industry), CCTV, Surveillance & Remote Monitoring
    Video surveillance plays a larger role in the casino market than simply watching people gambling and trying to catch pickpockets.
  • Wide-area surveillance on estates, farms and other large properties
    April 2019, Protoclea Advanced Image Engineering, Access Control & Identity Management, Integrated Solutions
    Using the right solution to protect large, open areas can be accomplished with the right technology and planning.
  • Visible light facial recognition
    April 2019, ZKTeco, Technews Publishing, This Week's Editor's Pick, Access Control & Identity Management, Integrated Solutions
    ZKTeco recently expanded its reach in the facial recognition market with the launch of its new series of visible light facial recognition (VLFR) products.
  • 2019 Internet of Things (IoT) Barometer
    March 2019, This Week's Editor's Pick, Integrated Solutions, IT infrastructure
    A majority of businesses that use IoT technology agree that it has either disrupted their industry or will do so in the next five years.
  • Video observation in the hotel industry
    March 2019, Dallmeier Electronic Southern Africa , Entertainment and Hospitality (Industry), CCTV, Surveillance & Remote Monitoring
    The best is just good enough: Hamburg's new luxury hotel The Fontenay relies on video security technology from Dallmeier.
  • 2 MP Starlight fixed camera
    April 2019, Longse Distribution, Products, CCTV, Surveillance & Remote Monitoring
    With the help of the Longse Starlight cameras, darkness becomes visible and your properties can always be kept under control.
  • When cybercrime affects health and safety
    April 2019, This Week's Editor's Pick, Cyber Security
    The threat of a category-one cyber-attack is that everything could seem right – the readings on the meter could be fine, checklists would be followed, and equipment would work – yet danger could still unfold.
  • Cathexis wraps up successful national roadshow
    April 2019, Cathexis Technologies, This Week's Editor's Pick, CCTV, Surveillance & Remote Monitoring, News, Conferences & Events, Training & Education
    Cathexis Technologies successfully concluded its national CathexisVision Roadshow. With events held in Durban, Port Elizabeth, Johannesburg and Cape Town.
  • Cam Era signs first franchisee
    April 2019, Technews Publishing, News, CCTV, Surveillance & Remote Monitoring
    After announcing the launch of its franchise business opportunity last year (https://www.securitysa.com/61103n), Cam Era has announced the signing of its first franchisee.
  • New service to fight cybersecurity threats to African banks
    April 2019, Cyber Security
    Foregenix is launching a service to combat the new and growing breed of cyber-attacks on African banks.
  • CCTV operators’ duties to response personnel at crime scenes
    April 2019, Leaderware, This Week's Editor's Pick, CCTV, Surveillance & Remote Monitoring, Security Services & Risk Management
    Control room operators often have a responsibility to monitor response scenes that go beyond the initial detection and response relationship.

 
 
         
Contact:
Technews Publishing (Pty) Ltd
1st Floor, Stabilitas House
265 Kent Ave, Randburg, 2194
South Africa
Publications by Technews
Dataweek Electronics & Communications Technology
Electronic Buyers Guide (EBG)

Hi-Tech Security Solutions
Hi-Tech Security Business Directory (HSBD)

Motion Control in Southern Africa
Motion Control Buyers’ Guide (MCBG)

South African Instrumentation & Control
South African Instrumentation & Control Buyers’ Guide (IBG)
Other
Terms & conditions of use, including privacy policy
PAIA Manual
         
    Mobile | Classic

Copyright © Technews Publishing (Pty) Ltd. All rights reserved.