PSI June2017

PANEL
“The reality is that any
IT network is only as
secure as the least
secure single device
that is connected to it”
(from previous page)
antivirus software, opens an infected
attachment to an email. In April, Microsoft
issued a security update that eliminates the
vulnerability.
Many security devices are vulnerable to this
ransomware, and to other similar attacks, if the
operating system in the device is a version of
Windows. It is very common for NVRs and DVRs
to use a Windows operating system. Neither the
installer nor the IT administrator for the network
can update these operating systems without the
provision of an update to the device by the
manufacturer. Most security product
manufacturers are now issuing such updates,
but typically do this infrequently on their own
schedule and not triggered by Microsoft’s
releasing of an update.
Thus, most installers could not have
prevented the attack affecting NVRs and DVRs
on a client’s network except by working with the
IT administrator to pre-empt the initial
triggering of such an attack. The IT admin
should be urged to:
• Ensure that any other Windows machine on
the same LAN as the security devices is always
fully updated and patched. Also, insure that
effective antivirus software is installed on all
such machines.
• Teach any users of Windows machines on
the same LAN to exercise caution with
attachments to email.
• Close all unused ports through the
configuration of all routers on the network and
through configuration of the firewalls on the
PCs. Even if an initial triggering of Wannacry
occurs, it cannot propagate if port 445 is closed.
Mike Reddington - Videcon
As technology continues to develop and the use
of the WEB and IT networks expands across
many different product platforms it is inevitable
that the security of these product platforms
grow in importance.
The reality is that any IT network is only as
secure as the least secure single device that is
connected to it. With the increase of usage of IP
products (NVRs and cameras) that are
connected on to these type of networks then
they are exposed to potential cyber-attacks and
used as a gateway on to a company's IT
network.
This has been a growing risk that we at
Videcon recognised many months ago and we
took the decision to further invest in our product
development to increase the cyber security of
our products. As a result of this investment we
have introduced Sequrinet with Enhanced
Password Control (EPC) across all our IP and
AHD NVRs and DVRs.
Sequrinet with EPC prohibits the use of
simplistic, easily infiltrated passwords and only
allows the use of passwords that feature a
combination of numbers, lower case letters,
upper case letters and symbols that are over five
characters long. Enhanced Password Control
(EPC) will also remove the use of drop down
user name profiles. Upon selection, EPC will
remove any backdoor user capability and will
disable P2P and DDNS options by default. The
result of this is a significant increase in the
cyber security of the CCTV system connected to
a network. This significantly mitigates the risk of
a company's IT network being hacked via the
CCTV system. This makes Videcon's products
one of the most secure network products
available in the market today and is ideal for
organisations requiring a stringent level of
password protection in sectors such as
Government, Banks and NHS.
So our advice to installers is to seriously
consider the cyber security risk for your
customer and only select a CCTV network
product platform that provides protection
against this potential risk like the Videcon
'Concept Pro' range of products.
72
www.psimagazine.co.uk