Experts 'name' reasons why home and business cameras are susceptible to data leakage

DNVN - The main causes of information insecurity for cameras are not changing the password when receiving the handover from the technician or setting a weak password, sharing the password, using other accounts to manage the camera system such as Facebook, Google...

According to information shared by technology and network security experts at the seminar "Basic network information security standards for surveillance cameras" organized by VietNamNet newspaper in collaboration with the Department of Information Security ( Ministry of Information and Communications ) on May 22, cameras are like special computers when they can listen, see, think (if integrated with artificial intelligence technology), detect objects and spaces within the lens's range of view.

"Cameras are never turned off, always online 24/7, rarely patched, almost never updated with patches or anti-virus software. Therefore, if attacked, there will be no one to protect them," said Mr. Vu Ngoc Son, Head of Technology Department - National Cyber ​​Security Association, Technical Director of NCS company.

According to Mr. Nguyen Viet Bang, Deputy General Director of VNPT Technology, a camera placed in the house will be like a computer with an operating system, can record audio, video and almost have an extra person in the house but running silently. Therefore, if there is a loophole, the camera device can completely leak information when sending it out.

Mr. Vu Ngoc Son.

Despite having many features and popularity, users are still not aware of protecting information security for surveillance cameras. At the discussion, experts mentioned some recent major camera system attacks. For example, in 2023, many Hikvision customers received hacker attack warning messages on the screen when viewing cameras. Hackers attacked Hikvision cameras through old vulnerabilities from 2021 even though the manufacturer had provided a patch.

In Vietnam, there have been no major attacks, but the situation is alarming. According to a 2020 survey, the number of cameras without updated passwords is up to 70%. In 2023, some hackers are selling access to cameras in Vietnam, with systems of up to 100,000 cameras. The amount of money spent to view is also modest, only about 800,000 VND to access 15 cameras.

Mr. Vu Ngoc Son pointed out 6 main reasons leading to information insecurity for cameras. These are users setting weak passwords, sharing passwords, using other accounts to manage the camera system such as Facebook, Google... Not changing the password when receiving the handover from the technician; the camera has zero-day vulnerabilities; not updating the patch; the storage server has vulnerabilities and is attacked by hackers; permissions are not strictly assigned, for example, sharing with the construction unit but then not revoking the rights.

If a surveillance camera is hacked, users will face serious consequences. For households, the first problem is the invasion of privacy, followed by the risk of being blackmailed for private images, sensitive sounds or other crimes. For example, hackers can use images and sounds collected through surveillance cameras to create deepfakes to scam; and be monitored remotely.

Experts discuss at the seminar.

To avoid the risk of information security loss and data leakage from surveillance cameras, expert Vu Ngoc Son gives some recommendations to users. That is, it is necessary to choose cameras with clear origin, announce video storage locations, data security policies for users; change passwords immediately upon handover, use two-factor authentication; choose suitable installation locations, avoid installing in sensitive locations, in important areas, it is mandatory to install standard cameras, avoid cases of important information leakage, minimum access configuration; regularly monitor and update patches.

According to Mr. Tran Dang Khoa, Deputy Director in charge of the Department of Information Security, the Ministry of Information and Communications is currently coordinating with units, businesses, and experts to develop national technical regulations on basic network information security requirements for surveillance camera equipment. This regulation is expected to be issued in 2024.

At that time, all cameras manufactured in Vietnam and imported must be inspected, evaluated, certified and meet national standards to be eligible to be brought to the Vietnamese market and supplied to users.

Phan Minh

Source: https://doanhnghiepvn.vn/chuyen-doi-so/an-ninh-mang/chuyen-gia-diem-mat-nguyen-nhan-khien-camera-gia-dinh-doanh-nghiep-de-bi-lo-du-lieu/20240523031550045