# Attacks and Preventive Measures on Video Surveillance Systems: A Review
## 3 Security Measures for VSS
\begin{tabular}{c c c} \hline \hline
**Type of Attacks** & \begin{tabular}{c} **Mechanisms that Help to** \\ **Prevent Attacks** \\ \end{tabular} & **Description** \\ \hline \multirow{4}{*}{\begin{tabular}{c} Spyware and malware \\ \end{tabular} } & \multirow{4}{*}{Anti-virus solution} & \begin{tabular}{c} Commercially available anti-virus solutions can scan \\ system and cache files, messages and emails as well as \\ website URLs. They can also prevent spyware and \\ malware by preventing access to a suspected \\ phishing website. \\ \end{tabular} \\ \hline IP spoofing & Firewall & \begin{tabular}{c} Firewall stops unauthorized inward or outward \\ connections. It can prevent various types of network \\ attacks by blocking unauthenticated wireless networks. \\ \end{tabular} \\ \hline Man-in-the-middle, visual layer attacks. & Secure API & \begin{tabular}{c} Cryptography-based API can provide various secure \\ functionalities to the application developer. \\ \end{tabular} \\ \hline Malware, DoS, covert channel attacks. & Access control & \begin{tabular}{c} Access control not only limits the access of processes but \\ also limits the user to resources and/or services, thus \\ limiting risk from malicious applications. \\ \end{tabular} \\ \hline Covert channel attacks, DoS, spyware, & Authentication & \begin{tabular}{c} The user can logn to a device only after being \\ authenticated to prevent its unauthorized use. \\ \end{tabular} \\ \hline Covert channel attack, spyware. & Spam filter & \begin{tabular}{c} Spam filtering applications block unwanted calls, \\ messages and emails. They can also prevent spam from \\ reaching to the user’s inbox. \\ \end{tabular} \\ \hline Covert channel attacks, malware attacks, & Pre-testing & \begin{tabular}{c} Pre-testing can ensure application security by \\ preventing malware. It can also validate applications \\ and give proper access authority to \\ application developers. \\ \end{tabular} \\ \hline All types of attacks. & Regular update & \
\begin{tabular}{c} Smartphone applications can prevent various types of \\ attacks by regularly updating from various \\ manufacturer-provided platforms. \\ \end{tabular} \\ \hline \hline \end{tabular} 
\begin{tabular}{c} The basic and necessary steps to avoid video surveillance camera attacks are as follows:  
1. Installation and regular updating of the anti-virus application is the foremost step to defend against malicious attacks. 2. Network topology and configuration of a system is critical in maintaining the security of IP-based cameras, as there are multiple entry gateways through which it can be attacked. Configuration access is the key to provide security to the system. A local network system with a firewall and virtual private network (VPN) software for remote access is always safe. A secure, encrypted connection is a barrier for any attackers before they can go through a firewall. An alternative solution could be to use a cloud-connected IP security camera. In this type of locally connected system, rather than relying on a password to gain access to the firewall of a camera system, cloud-connected IP security cameras will communicate with a secured cloud-based server over an encrypted connection. Users can gain access by linking up their devices with those servers. Cloud-connected devices have the added advantage of continuous monitoring over locally connected systems. 3. Using a unique, lengthy and unpredictable password for each camera is a good starting point. This is especially critical for a port forwarding system. However, if a system employs VPN, having a single secured password for all connected cameras is enough. As a rule, changing passwords every 90 days is recommended. 4. Priority should be given to provide cybersecurity training to all employees who may have access to a central video surveillance system and all personnel must be made aware of cyber security guidelines. 5. In case of security breaches, a cybersecurity incident response team can be constituted to respond to such emergencies.