Security Analysis of IP-cameras

Student thesis: Master Thesis and HD Thesis

  • Thue Vestergaard Iversen
  • Thomas Lundsgaard Kammersgaard
4. term, Software, Master (Master Programme)
This project is about a security analysis of IP-cameras and developing a solution to improve the security through automated firmware updates.
We found it implausible to perform automated testing on firmware images to detect known vulnerabilities through the analysis.

The solution developed through this project is an automated update framework that relies on the device manufacturers to develop and maintain firmware updates for the devices.
Through said updates, the overall security of their devices would increase, but only if the end-user applies the updates.
We propose a solution that can automate and streamline the update process on IP-cameras from multiple manufactures.

The overall conclusion of this project is that the current approach to firmware development, distribution, and consumption are all contributing factors to the security of IP-cameras in general.
The solution developed in this project automates the update process for IP-cameras produced by Hikvision and Herospeed.
This is done by selecting the correct firmware and making sensible choices such as calculating checksum matches, performing backups and reapplying user configurations.
Publication date28 May 2021
Number of pages84
ID: 412988892