Security Analysis of IP-cameras

Studenteropgave: Master afgangsprojekt

  • Thue Vestergaard Iversen
  • Thomas Lundsgaard Kammersgaard
4. semester, Software, Kandidat (Kandidatuddannelse)
This project is about a security analysis of IP-cameras and developing a solution to improve the security through automated firmware updates.
We found it implausible to perform automated testing on firmware images to detect known vulnerabilities through the analysis.

The solution developed through this project is an automated update framework that relies on the device manufacturers to develop and maintain firmware updates for the devices.
Through said updates, the overall security of their devices would increase, but only if the end-user applies the updates.
We propose a solution that can automate and streamline the update process on IP-cameras from multiple manufactures.

The overall conclusion of this project is that the current approach to firmware development, distribution, and consumption are all contributing factors to the security of IP-cameras in general.
The solution developed in this project automates the update process for IP-cameras produced by Hikvision and Herospeed.
This is done by selecting the correct firmware and making sensible choices such as calculating checksum matches, performing backups and reapplying user configurations.
SprogEngelsk
Udgivelsesdato28 maj 2021
Antal sider84
ID: 412988892