Cyber Security Checklist to secure CCTV from Hacking

CCTV is critical to the security of any critical infrastructure. This blog provides a Cyber Security Checklist to secure CCTV from Hacking.

Cyber Security Checklist to secure CCTV from Hacking

(1) Risk Assessment

Risk Assessment is critical concerning CCTV and posed by the environment. It is recommended to perform an exhaustive risk assessment to categorize risks associated with the device and environment.

(2) Supply Chain Security of CCTV

Ensure supply chain security of CCTV by verifying software bill of material for third-party components, versioning, and published vulnerabilities.

(3) Hardware Root of Trust

Check whether the Cryptography Hardware Root of Trust is provisioned in CCTV for the integrity of running firmware.

(4) Code Review

Ensure code review is done for firmware used in CCTV by the security auditing agency to identify usage of banned C functions, and to mitigate existing vulnerabilities in the used packages.

(5) Memory Protection Techniques

Check memory protection mechanisms such as Address Space Layout Randomisation (ASLR), Data Execution Protection (DEP), Stack Smashing Protector (SSP), read-only relocation (RELRO), etc. are enabled while the development of CCTVs.

(6) Collection of Logs

Ensure provision is available for collecting logs of security events that include authentication attempts, access to debugging, low power, etc.

(7) Use of Reliable Time Stamp

A reliable time stamp is critical for accessing the security logs with genuine time stamps. Ensure provision is available for a reliable time by connecting the system with NTP or with a trusted time source.

(8) Secure Communication

Ensure CCTV supports the security of data in transit by employing communication security such as TLS. It simply means the CCTV device cryptographically verifies the X.509 certificate.

(9) Disable debugging interfaces

Ensure debugging interfaces such as JTAG, UART, SWD, etc. are disabled or protected by strong passwords in CCTV in the field.

(10) Update Mechanism

Ensure Devices use a secure update mechanism to mitigate any identified vulnerabilities on the CCTV devices.