How to Safeguard/Recover from Issues of Cyber Threats to Surveillance Systems?

Security cameras are almost ubiquitous, capturing our activities, especially at work. You know who watches you. Do you know you can be watched even by hackers / unknown sources? Most surveillance systems such as the hidden camera, CCTV camera, etc. come with remote internet access enabled by default. These systems often have weak password security. Not all buyers are aware about these drawbacks or the need to disable the ‘default’ nature of remote internet access and securing the systems with strong passwords. This only facilitates hackers to remotely tap into the video feeds easily. There are numerous instances of surveillance systems being vulnerable to cyber threats and breakdowns.

Users commonly use a specific user accounts (eg. admin) that can be easily accessed by hackers. Those surveillance systems with automatic log-in and known default passwords are the most vulnerable to cyber threats. It is no surprise if the password of your security camera is cracked via brute force. This happens when the password is weak or added by default. Accessing live and recorded CCTV camera footage by hackers is no new phenomenon. Yes, even via hacking, the security camera can be redirected, especially the one that is adjustable.

 Tips to safeguard / recover from cyber threat issues
•    Ensure proper setup and configuration of the surveillance systems
•    Change default vendor passwords
•    Use strong passwords that cannot be easily cracked
•    Disable remote access of CCTV camera or hidden camera when not needed
•    Allow access to only trusted people
•    Add filtering or security layer to thwart any traffic from non-trusted computers from accessing the surveillance systems
•    Not expose the security camera to the Internet unless utterly necessary
•    Do not repeatedly maintain connections to a feed for more than 30 minutes
•    Scan the surveillance systems network regularly for any vulnerable systems.

Understanding the threat profile of the system according to your type of business, you can address an assortment of vulnerabilities your surveillance systems are prone to. This would help you identify the threats and accordingly follow recovery or safeguarding steps.

Installation of Surveillance Systems such as the hidden camera, IP security camera, CCTV camera, alarm systems, etc. is integral to industrial automation to ensure safety and security of the premise. But your security can be at stake via cyber threats. Ensure that you buy the right brands from the right industrial automation service provider. Proper setup and configuration of the surveillance systems does matter to ensure non-vulnerability to cyber threats and breakdowns.

Threats to Industrial Automation and Safeguarding Tips!

Enter any industrial segment; you will be shipped to a terrain of challenges, competition, and the war of the survival of the fittest. If automation and control drive most of the industrial activities in hotels, offices, factories, institutes, malls, etc. the cyber security quotient does arise. Cyber threats can lead to brand erosion and potentially significant monetary loss.

Asset owners who exploit automation and control systems like PLC, SCADA, and RFID are aware about the possible threats and accordingly install security solutions to minimize the risk of cyber attacks and breakdowns. Cyber attacks are generally aimed as a result of personal grievance or interrupting industrial activities for various gains, which may be political or monetary gains or business rivalries.

“Industrial automation involves use of open and collaborative networks. Users should be aware of the various threats and exploit measures to safeguard their industrial activities. It is generally a blend of inadequate firewalls, unsecured remote access, and lack of segmentation of network that makes automation and control systems more vulnerable to threats,” says Mr. C P Singh, Founder and Chief Mentor of Smart Automation (a leading service provider of home automation solutions and energy saving products).

Possible cyber threats / what causes cyber threats
•    Error by installer / designer in configuring/installing the system
•    Hacking of automation and control systems – SCADA, PLC, RFID
•    Manipulation of industrial protocol simulated in a control system
•    Manipulation of hardware devices
•    Keeping a foothold by putting down a Trojan to maintain access
•    Exfiltration of VPN configuration files
•    Using SQL injection to do HMI attacks
•    Cross-site request forgery and stealing of credentials
•    Error in running processes and systems by the operator
•    No adequate maintenance and upgradation of SCADA, PLC, RFID
•    Malicious attacks from internal sources.

Network loopholes not to mention hardware and software issues can also facilitate easy cyber threats. When we speak about hardware and software issues, it is all about unsecured remote terminal units (RTUs), computers, specific HMI, smart phones, peripherals, USBs, etc. How the software is controlled also matters!

Here are few tips asset owners in the industrial segment can follow for safeguarding control systems from cyber attacks:
•    Establishing base lines at the port and channel level
•    Disable Internet access if you see a threat
•    Prioritize on basic password management or changeover management
•    Use a USB media lockdown
•    Reduce observables for hackers to find you
•    Put the control system on a sub-net to deny access to other systems
•    Any unused feature of your control system should be secured and maintained
•    Do not use unsecured and outdated hardware and software.

Addressing the challenges posed by cyber threats is what many an asset owner today is prioritizing when using automation and control systems.