What are the best practices for privacy and security?

The purpose of security protection is to maintain social public safety. If the security surveillance camera products used are not safe, as well as the use and management of the system are not safe, then the so-called security precautions are meaningless.

The security monitoring industry, especially the video surveillance camera from analog surveillance cameras to wireless security cameras, is facing more and more security issues, such as Internet of Things security and network security. Some of these are caused by the lack of attention from security camera product manufacturers. In the era of coaxial analog surveillance cameras, security surveillance devices all work on the intranet. Generally, manufacturers focus on product cost, performance, and ease of use, and pay little attention to security. After entering the Internet age, these conveniences and ease of use have become major security risks. For example, weak passwords, in order to facilitate the connection with third-party systems, all supported protocols are enabled by default, which is contrary to the best practice of information security.

What are the common security threats to systems?

As a front-end part of the Internet of Things, security monitoring equipment is the first line of defense of the entire security protection system and the perception layer of the entire protection system. The security threats faced can be divided into the following three categories from the architecture of the Internet of Things.

Perception layer threat

Physical attack
Equipment was sabotaged, and stolen. The physical interface is directly exposed outside. Static and lightning surges can also damage equipment.

Data breach
The information data preset by the device is easy to read or tampered with. Privacy data collection and disclosure during processing.

Illegal access
Weak passwords, reserved debugging interfaces, etc. are easy to be exploited.

Illegal update
The update verification mechanism is not sound, and unofficial firmware is easily written into the device.

Expired components
Outdated components and lack of a robust update mechanism.

Malicious software
The sheer number of devices makes regular update and maintenance operations difficult and vulnerable to malware.

Transport Layer Threats

Network attacks
Attacks from the Internet.

Data breach
During cloud transmission, the key data of control commands and collection is encrypted, which is easy to be stolen.

Application Layer Threats

Data tampering
There is no verification mechanism for network transmission, and control commands and collected data are easily tampered with.

Device management
There are many scattered devices, making it difficult to manage the upgrade process and security status.

Ultra vires operation
Permission management is not perfect.

System Vulnerabilities
Vulnerabilities of general-purpose operating systems at the application layer.

Data breach
Application layer data encryption, lack of security measures. For example, directly unplug the hard disk.

Expired components
There are many components in the application layer, and the updates are not timely, and the vulnerabilities of the components themselves are easy to be exploited.

Configuration Vulnerabilities
Configuration problem, not checked or updated for a long time.

Illegal update
Unofficial software is directly updated without verification.

What do you mean by security protection?

From the perspective of the types of security threats faced by security equipment, it can be divided into six categories: terminal security, data security, application security, network security, privacy protection, and security compliance. However, security protection is a systematic project. We should evaluate the security of the entire security system as a whole and do a good job in security protection. Specifically, it includes four aspects: product security, network security, privacy protection/security compliance, and system engineering security.

How do you run a successful safety security protection program?

Physical protection. The equipment is placed in the cabinet and computer room, and the access control authority and key management are done well to prevent unauthorized personnel from touching the hardware equipment and damaging the hard disk, TF card, etc.

Update security protection passwords regularly.

Settings, update password reset information.

Update the device firmware to the latest version in time.

Change the default HTTP port and other service ports of the device.

Start HTTPS.

Enable whitelist.

MAC address binding.

Reasonable allocation of user rights.

Disable non-essential services and use safe mode. Disable Telnet, SSH, SNMP, SMTP, UPnP, and other functions. If it needs to be enabled, it is recommended to select v3 for SNMP and set the encryption password and authentication password. SMTP selects TLS access. Select SFTP for FTP and set a password. Select the WPA2-PSK encryption mode for the AP hotspot and set a complex password. It is important for security protection