IP Camera Hardening and Cybersecurity Guide |
Secure Configuration and Operation
11 |
14
Data subject to change without notice | August 22
Security Systems / Video Systems
SIEM System
A Security Information and Event Management (SIEM) system is used to collect and analyse information from different
devices and systems. The cameras can be integrated with a SIEM system by sending the logs via syslog protocol.
Analysing these logs can help with maintenance, detect configuration errors or attacks on the camera (e. g. false logins).
PKI
PKI or Public Key Infrastructure refers to the systems needed to generate and manage digital certificates. For HTTPS,
network authentication with 802.1x, user authentication with certificates and other encryption functions, custom certificates
can be installed on the camera. The most secure variant of certificate deployment is to generate a signing request on the
camera and request a certificate from an internal or external CA (certification authority). This way the private key of the
certificate never leaves the device and is securely stored in the Secure Element (SE) of the camera.
AD FS
Active Directory Federation Services (AD FS) is a service offered by Microsoft, allowing authentication to a local Active
Directory (using an AD FS server) or to the Azure Cloud. Besides local user authentication with either passwords or
certificate-based authentication, integration of the cameras into an Active Directory Domain is possible with AD FS to
authenticate and mange user access centrally.
