DNVN - The main causes of information insecurity for cameras are not changing the password when receiving the handover from the technician or setting a weak password, sharing the password, using other accounts to manage the camera system such as Facebook, Google...
According to information shared by technology and network security experts at the seminar "Basic network information security standards for surveillance cameras" organized by VietNamNet newspaper in collaboration with the Department of Information Security (Ministry of Information and Communications) on May 22, cameras are like special computers when they can listen, see, think (if integrated with artificial intelligence technology), detect objects and spaces within the lens's observation range.
"Cameras are never turned off, always online 24/7, rarely patched, almost never updated with patches or anti-virus software. Therefore, if attacked, there will be no one to protect them," said Mr. Vu Ngoc Son, Head of Technology Department - National Cyber Security Association, Technical Director of NCS company.
According to Mr. Nguyen Viet Bang, Deputy General Director of VNPT Technology, a camera placed in the house will be like a computer with an operating system, can record audio, video and almost have an extra person in the house but running silently. Therefore, if there is a loophole, the camera device can completely leak information when sending it out.
Mr. Vu Ngoc Son.
Despite having many features and being so popular, in reality, users are still not aware of protecting information security for surveillance cameras. At the discussion, experts mentioned some recent major attacks on camera systems. For example, in 2023, many Hikvision customers received hacker attack warning messages on the screen when viewing cameras. Hackers attacked Hikvision cameras through an old vulnerability from 2021, even though the manufacturer had provided a patch.
In Vietnam, there have been no major attacks, but the situation is alarming. According to a 2020 survey, the number of cameras with unupdated passwords was up to 70%. In 2023, some hackers sold access to cameras in Vietnam, with systems of up to 100,000 cameras. The amount of money spent to view is also modest, only about 800,000 VND to access 15 cameras.
Mr. Vu Ngoc Son pointed out 6 main reasons leading to information insecurity for cameras. These are users setting weak passwords, sharing passwords, using other accounts to manage the camera system such as Facebook, Google... Not changing the password when receiving the handover from the technician; the camera has a zero day vulnerability; not updating the patch; the storage server has a vulnerability and is attacked by hackers; permissions are not strictly assigned, for example sharing with the construction unit but then not revoking the permissions.
If a surveillance camera is hacked, users will face serious consequences. For households, the first problem is the invasion of privacy, followed by the risk of being blackmailed for private images, sensitive sounds or other criminal acts. For example, hackers can use images and sounds collected through surveillance cameras to create deepfakes to scam; being monitored remotely.
Experts discuss at the seminar.
To avoid the risk of information security loss and data leakage from surveillance cameras, expert Vu Ngoc Son gives some recommendations to users. That is, it is necessary to choose cameras with clear origin, announce the video storage location, data security policy for users; change passwords immediately upon handover, use two-factor authentication; choose suitable installation locations, avoid installing in sensitive locations, in important areas, it is mandatory to install standard cameras, avoid cases of important information leakage, minimum access configuration; regularly monitor and update patches.
According to Mr. Tran Dang Khoa, Deputy Director in charge of the Department of Information Security, the Ministry of Information and Communications is currently coordinating with units, businesses, and experts to develop national technical regulations on basic network information security requirements for surveillance camera equipment. This regulation is expected to be issued in 2024.
At that time, all cameras manufactured in Vietnam and imported must be inspected, evaluated, certified and meet national standards to be eligible to be brought to the Vietnamese market and supplied to users.
Phan Minh
Source: https://doanhnghiepvn.vn/chuyen-doi-so/an-ninh-mang/chuyen-gia-diem-mat-nguyen-nhan-khien-camera-gia-dinh-doanh-nghiep-de-bi-lo-du-lieu/20240523031550045
![[Photo] Prime Minister Pham Minh Chinh chairs Government Conference with localities on economic growth](https://vstatic.vietnam.vn/vietnam/resource/IMAGE/2025/2/21/f34583484f2643a2a2b72168a0d64baa)
Comment (0)