Methodology for Securing IoT IP-Based Camera Systems

Video surveillance systems in airport facilities are implemented using equipment from recognized providers. However, many Internet of Things (IoT) vendors overlook the critical need for device security, focusing solely on the benefits of automation. This neglect has created numerous opportunities for attackers to exploit system vulnerabilities, compromising customers’ businesses, security, and operations. Risks arise, especially when multiple providers have been involved in the implementation or when no maintenance or updates have been applied to the systems. These situations put the overall security of the airport facilities at risk. Some well-known attacks have been identified and classified according to their overall impact on the systems. This process is part of system threat modeling. After a system is implemented and operational, it is important to perform regular vulnerability assessments to determine the current state of the system’s security and to mitigate further risks. In this paper, a testbed was implemented using open-source technologies and protocols commonly used in commercial solutions. A vulnerability assessment was conducted, which helped identify system vulnerabilities. This information was then used to design a series of attacks applied to the testbed. The compromised system was analyzed using forensic investigation methodologies. Based on the findings, a methodology was proposed to secure IoT systems that use IP (Internet Protocol) cameras.