Attacks and Preventive Measures on Video Surveillance Systems: A Review
Source abstract
Abstract
Video surveillance systems are widely deployed with large systems for use in strategic places such as home security, public transportation, banks, ATM centers, city centers, airports, and public roads, and play a vital role in protecting critical infrastructures. As various attacks are possible in these systems, identifying attacks and considering suitable security measures are essential. In this paper, we present a detailed review of existing and possible threats in video surveillance, CCTV, and IP-camera systems. This provides insight for the better identification of the security risks associated with the design and deployment of these systems and promotes further research in this emerging field. We also present countermeasures to prevent and protect the surveillance systems from various security attacks.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Network Security and Intrusion Detection · Advanced Malware Detection Techniques · Chaos-based Image/Signal Encryption
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Department of Computer Science & Engineering, Dayananda Sagar University, Bengaluru 560078, India
Department of Computer Science & Engineering, Siddaganga Institute of Technology, Tumakuru 572103, India
Department of Computer Science & Engineering, Adama Science & Technology University, Adama 1888, Ethiopia
Department of Computer Engineering, Sejong University, Seoul 05000, Korea
References (65)
Show source-provided references
1. (2021, May 15). Market Analysis Report. Available online: https://www.grandviewresearch.com/industry-analysis/smart-home-security-camera-market.
2. CVSS: A Cloud-Based Visual Surveillance System10.4018/IJDCF.2018010107 ↗
3. Shodan (2020, November 02). Available online: https://www.shodan.io/.
4. (2021, May 15). The Mirai Botnet Explained: How Teen Scammers and CCTV Cameras almost Brought Down the Internet. Available online: https://www.csoonline.com/article/3258748/the-mirai-botnet-explained-how-teen-scammers-and-cctv-cameras-almost-brought-down-the-internet.html.
5. CyberScoop (2021, May 15). Available online: https://www.cyberscoop.com/washington-dc-ransomware-dc-police-department/.
6. (2021, May 15). Dozens of Canon Security Cameras Hacked in Japan. Available online: https://english.kyodonews.net/news/2018/05/91ec861ae24d-dozens-of-security-cameras-hacked-in-japan.html?phrase=ham%20fighters&words=.
7. (2021, May 15). Bosch IP Camera Vulnerability (CVE-2018-19036). Available online: https://psirt.bosch.com/security-advisories/bosch-2018-1202.html.
8. Vulners (2021, May 15). Available online: https://vulners.com/talos/TALOS-2018-0565.
9. (2021, May 15). Your Smart Camera May Have Been Spying on You. Available online: https://www.cnet.com/home/smart-home/your-smart-camera-may-have-been-spying-on-you/.
10. (2021, May 15). Critical Flaw Lets Hackers Take Control of Samsung SmartCam Cameras. Available online: https://www.computerworld.com/article/3158204/critical-flaw-lets-hackers-take-control-of-samsung-smartcam-cameras.html.
11. (2021, May 15). Major Vulnerabilities and Exploit in Foscam Cameras. Available online: https://www.vdoo.com/blog/vdoo-has-found-major-vulnerabilities-in-foscam-cameras.
12. India Today (2021, May 15). Available online: https://www.indiatoday.in/mail-today/story/installation-of-1-4-lakh-chinese-cctv-cameras-by-delhi-govt-sparks-row-1696032-2020-07-02.10.1016/S0969-4765(21)00039-4 ↗
13. Kao, I.-L. (2011). Securing Mobile Devices in the Business Environment, IBM. IBM Global Technology Services–Thought Leadership White Paper.
14. Becher, M., Freiling, F.C., Hoffmann, J., Holz, T., Uellenbeck, S., and Wolf, C. (2011, January 22–25). Mobile Security Catching Up? Revealing the Nuts and Bolts of the Security of Mobile Devices. Proceedings of the 2011 IEEE Symposium on Security and Privacy, Oakland, CA, USA.10.1109/SP.2011.29 ↗
15. McAfee Labs (2013). McAfee Threats Report: First Quarter 2013, McAffe Press. Available online: http://www.mcafee.com/us/resources/re-ports/rpquarterly-threat-q.
16. F-Secure Labs (2013). Mobile Threat Report January-March 2013, F-Secure Labs. Available online: http://www.f-secure.com/static/doc/labs_global!Research/Mobile_Threat_Report_Q1_2013.
17. Stites, D., and Tadimla, A. (2021, May 15). A Survey of Mobile Device Security, Threats, Vulnerabilities and Defences. Available online: http//afewguys cod-ing.com/2011/12/survey-mobile-device-security-threats vulnerabilities-defences.
18. Enck, W., Gilbert, P., Chun, B.G., Cox, L.P., Jung, J., McDaniel, P., Sheth, A.P., and Droid, T. (2010, January 4–6). An Information on Tracking System for Real Time Privacy Monitoring on Smart-Phones. Proceedings of the 9th USENIX Conference on Operating Systems Design and Implementation, Vancouver, BC, Canada.
19. Franklin, J., Brown, C., Dog, S., McNab, N., Voss-Northrop, S., Peck, M., and Stidham, B. (2021, May 15). Assessing Threats to Mobile Devices & Infrastructure NISTIR 8144, Available online: https://csrc.nist.gov/CSRC/media/Publications/nistir/8144/draft/documents/nistir8144_draft.pdf.
20. Spotlight: The rise of the smartphone10.1109/MDSO.2006.22 ↗
21. Liranzo, J., and Hayajneh, T. (2017, January 19–21). Security and Privacy Issues Affecting Cloud-Based IP camera. Proceedings of the 2017 IEEE 8th Annual Ubiquitous Computing, Electronics and Mobile Communication Conference (UEMCON), New York, NY, USA.10.1109/UEMCON.2017.8249043 ↗
22. Network attacks: Taxonomy, tools and systems10.1016/j.jnca.2013.08.001 ↗
23. Rytel, M., Felkner, A., and Janiszewski, M. (2020). Towards a Safer Internet of Things—A Survey of IoT Vulnerability Data Sources. Sensors, 20.10.3390/s20215969 ↗
24. Costin, A. (2021, May 15). Poor Man’s Panopticon: Mass CCTV Surveillance for the Masses. Available online: http://andreicostin.com/papers/poc2013_andrei.slides.pdf.
25. Mowery, K., Wustrow, E., Wypych, T., Singleton, C., Comfort, C., Rescorla, E., Halderman, J.A., Shacham, H., and Checkoway, S. (2014). Security analysis of a full-body scanner. 23rd USENIX Security Symposium USENIX Security 14, USENIX Association.
26. Jones, E., Le Moigne, O., and Robert, J.-M. (2004, January 19). IP traceback solutions based on time to live covert channel. Proceedings of the 2004 12th IEEE International Conference on Networks (ICON 2004) (IEEE Cat. No. 04EX955), Singapore.
27. Covert Channels-Based Stealth Attacks in Industry 4.010.1109/JSYST.2019.2912308 ↗
28. Guri, M., Hasson, O., Kedma, G., and Elovici, Y. (2016). Visisploit: An optical covert-channel. arXiv.
29. Forensic analysis of video steganography tools10.7717/peerj-cs.7 ↗
30. CCTV Surveillance System, attacks and design goals
31. Maharjan, R., Shrestha, A.K., and Basnet, R. (2019). Image Steganography: Protection of Digital Properties against Eavesdrop-ping. arXiv.
32. Yin, J., Fen, G., Mughal, F., and Iranmanesh, V. (2015, January 2–4). Internet of Things: Securing Data using Image Steganography. Proceedings of the 2015 3rd International Conference on Artificial Intelligence, Modelling and Simulation (AIMS), Kota Kinabalu, Malaysia.10.1109/AIMS.2015.56 ↗
33. The detection and defence of DoS attack for wireless sensor network
34. Pan, J. (2019, January 5–7). Physical Integrity Attack Detection of Surveillance Camera with Deep Learning based Video Frame Interpolation. Proceedings of the 2019 IEEE International Conference on Internet of Things and Intelligence System (IoTaIS), Bali, Indonesia.10.1109/IoTaIS47347.2019.8980385 ↗
35. Blasing, T., Batyuk, L., Schmidt, A.-D., Camtepe, S., and Albayrak, S. (2010, January 19–20). An Android Application Sandbox system for suspicious software detection. Proceedings of the 2010 5th International Conference on Malicious and Unwanted Software, Nancy, France.10.1109/MALWARE.2010.5665792 ↗
36. (2021, March 11). Available online: https://www.cynet.com/network-attacks/privilege-escalation/.
37. Hur, J.B., and Shamsi, J.A. (2017, January 30–31). A survey on security issues, vulnerabilities and attacks in Android based smartphone. Proceedings of the 2017 International Conference on Information and Communication Technologies (ICICT), Karachi, Pakistan.10.1109/ICICT.2017.8320163 ↗
38. Cai, Y., Tang, Y., Li, H., Yu, L., Zhou, H., Luo, X., He, L., and Su, P. (2020, January 18–21). Resource Race Attacks on Android. Proceedings of the 2020 IEEE 27th International Conference on Software Analysis, Evolution and Reengineering (SANER), London, ON, Canada.10.1109/SANER48275.2020.9054863 ↗
39. Raveendranath, R., Rajamani, V., Babu, A.J., and Datta, S.K. (2014, January 10–11). Android malware attacks and countermeasures: Cur-rent and future directions. Proceedings of the 2014 International Conference on Control, Instrumentation, Communication and Computa-tional Technologies (ICCICCT), Kanyakumari, India.10.1109/ICCICCT.2014.6992944 ↗
40. Wetherall, D., ChoDnes, D., Greenstein, B., Han, S., Homyack, P., Jung, J., Schechter, S., and Wang, X. (2011). Privacy revela-tions for web and mobile apps. 13th Workshop on Hot Topics in Operating Systems HotOS XIII, USENIX Association.
41. Automatic Smudge Attack Based on Machine Learning and Pattern Lock System Safety Analysis
42. Prema, S., and Pramod, T.C. (2018, January 15–16). Key Establishment Scheme for Intra and Inter Cluster Communication in WSN. Proceedings of the 2018 Second. International Conference on Computing Methodologies and Communication (ICCMC), Erode, India.10.1109/ICCMC.2018.8487756 ↗
43. T.C., P., G.S., T., Iyengar, S.S., and Sunitha, N.R. (2019). CKMI: Comprehensive key management infrastructure design for Industrial Automation and Control Systems. Future Internet, 11.10.3390/fi11060126 ↗
44. Security in wearable communications10.1109/MNET.2016.7579028 ↗
45. Key pre-distribution schemes to support various architectural deployment models in WSN
46. Pramod, T.C., and Sunitha, N.R. (2013, January 4–6). An approach to detect malicious activities in SCADA systems. Proceedings of the 2013 Fourth International Conference on Computing, Communications and Networking Technologies (ICCCNT), Tiruchengode, India.10.1109/ICCCNT.2013.6726619 ↗
47. Kalbo, N., Mirsky, Y., Shabtai, A., and Elovici, Y. (2020). The Security of IP-Based Video Surveillance Systems. Sensors, 20.10.3390/s20174806 ↗
48. (2020, October 09). Android Camera Bug Under the Microscope. Available online: https://www.darkreading.com/vulnerabilities---threats/android-camera-bug-under-the-microscope/d/d-id/1339090.
49. Exploiting the Vulnerabilities of Android Camera API10.17148/IARJSET.2015.2817 ↗
50. Smart Surveillance Monitoring System Using Raspberry PI and PIR Sensor
51. Entropy-based security risk measurement for Android mobile applications10.1007/s00500-018-3377-5 ↗
52. New facets of mobile botnet: Architecture and evaluation10.1007/s10207-015-0310-0 ↗
53. DDoS in the IoT: Mirai and Other Botnets10.1109/MC.2017.201 ↗
54. Security threats to mobile multimedia applications: Camera-based attacks on mobile phones10.1109/MCOM.2014.6766089 ↗
55. Adversarial attack-based security vulnerability verification using deep learning library for multimedia video surveillance10.1007/s11042-019-7262-8 ↗
56. Secure Surveillance Framework for IoT Systems Using Probabilistic Image Encryption10.1109/TII.2018.2791944 ↗
57. Framework for a Cloud-Based Multimedia Surveillance System10.1155/2014/135257 ↗
58. Analysis of dictionary methods for PIN selection10.1016/j.cose.2013.08.006 ↗
59. A security framework for cloud-based video surveillance system10.1007/s11042-017-4488-1 ↗
60. Video structured description technology based intelligence analysis of surveillance videos for public security applications10.1007/s11042-015-3112-5 ↗
61. Secure privacy vault design for distributed multimedia surveillance system10.1016/j.future.2014.10.019 ↗
62. Object based watermarking for H.264/AVC video resistant to rst attacks10.1007/s11042-014-2422-3 ↗
63. Authentication of surveillance videos: Detecting frame duplication based on residual frame10.1111/1556-4029.13658 ↗
64. Lee, D., and Park, N. (2020). Blockchain based privacy preserving multimedia intelligent video surveillance using secure Merkle tree. Multimed. Tools Appl., 1–18.10.1007/s11042-020-08776-y ↗
65. Fitwi, A., Chen, Y., and Zhu, S. (2019, January 14–17). A Lightweight Blockchain-Based Privacy Protection for Smart Surveillance at the Edge. Proceedings of the 2019 IEEE International Conference on Blockchain (Blockchain), Atlanta, GA, USA.10.1109/Blockchain.2019.00080 ↗