Securing Smart Building Devices

The project analyzes the security and privacy vulnerabilities of the system created by Videotec, such as unauthorized access, video manipulation, Dos, update with corrupted firmware. In the face of the detection of vulnerabilities, solutions and countermeasures will be designed to prevent, mitigate and defend the system.
As a final step, the project will analyze potential vulnerabilities in business processes and redefine them consistently to cyber security policies.
In the recent past, surveillance technologies have advanced from analog systems to packet switched systems (over IPv4 & IPv6 networks). Additionally, video surveillance systems have become inexpensive due to the emerging popularity of Internet of Things (IoT) networks. As a result, the market for security devices in connected homes has grown immensely over the last several years. Due to their convenience, practicality, and affordability, video surveillance systems have become ubiquitous in our daily lives. However, recently, these systems and their components have been the target of cyber attacks. For example, they have been the target of Distributed Denial of Service (DDoS) attacks, exploited to invade the users’ privacy, and even to mine crypto-currency.
The objective of the project is to carry out a vulnerability analysis of the Surveillance IP Network Cameras (SINC), considering both the individual components, e.g., board, video encoder, communication protocols, password saving and authentication policies and the architecture as a whole. In addition, we are interested to perform vulnerability analysis under these three attack scenarios: (i) compromise of the device at the hardware level, (ii) compromise of the device at software level, and (iii) sniffing network traffic from the device. Finally, to mitigate the identified vulnerabilities, we plan to design and develop secure solutions leveraging (i) fingerprinting techniques, (ii) remote attestation techniques, and (iii) machine learning techniques.
------ -- ------


Detailed Project Information
Principal Investigator: Mauro Conti 
Project Start Date: December 2019
Project Duration: 12 months
Sponsor: Videotec
Project Number:  N/A
Grant: N/A
------ -----