IP Camera Hardening and Cybersecurity Guide |
Secure Configuration and Operation
3 |
14
Data subject to change without notice | August 22
Security Systems / Video Systems
Introduction
Cybersecurity is an important topic for IP cameras as they are used to show and record data protection relevant data that
can be easily misused. Additionally, the environment in which cameras are used transforms from a traditional closed
network (CCTV: Closed Circuit TeleVision) to a connected space using IoT (Internet of Things) devices connected to cloud
services or reachable via the Internet, requiring additional security measures.
The following document can be used as a system-hardening recommendation for Bosch Video Surveillance Cameras
describing secure settings as well as hardening recommendations for the environment and security features of the
cameras.
IP Camera Hardening
The following section shows and outlines desirable camera settings for better cyber and data security in an integrated
scenario, as the camera is delivered with mostly compatibility settings to allow easy integration into existing environments.
Even though, it is recommended to reach the settings as shown below (Level 2), there can be limitations of the operational
environment that mandates the use of a certain protocol or feature which is less secure (e. g. SNMPv1). The Reasoning
chapter describes why a certain protocol should be enabled or disabled to allow a better-informed choice.
Hardening Levels
The default configuration of devices is mostly defined by compatibility to different environments, therefore enabling some
features that might impact security. Depending on the target environment and its intended security level, some hardening
might be required.
There are two levels of hardening defined, namely ’elevated’ and ‘strict’. Hardening level ‘strict’ features the most secure
means of setting up a device but might be limiting the usage of the device as features like auto discovery of a device are
disabled. For each feature it should be evaluated if ‘elevated’ settings or ‘strict’ settings can be applied. For helping with the
decision, a description of each feature can be found in chapter 2.3.
The section below gives an overview in how to achieve these levels. The table below uses the following color coding:
Disabled
Optional
Enabled
