## 3 Critical Analysis of Selected Literature
### Supply Chain Exploitation Technique  
The attacker can use third party suppliers to inject an attack into isolated networks. One of these techniques is known as supply chain exploitation. In this method, the attacker takes advantage of a **vulnerability** to compromise a patch update in the cloud instance of the camera software supplier, responsible for preparing or building the latest version of camera firmware. Similar attacks have been seen in the case of corporate firewall software, such as the SolarWinds incident. The attacker's goal is to replace legitimate patches with malware-infected ones. These infected patches are then installed directly from the cloud into local devices through middleware deployment services, which could include the corporate file server, as shown in Figure 7. Another type of supply chain exploitation technique is **Rouge Maintenance**. In this scenario, a compromised CCTV installler, supplier, or Annual Maintenance Contract (AMC) provider becomes involved. When a camera is sent to the service center for hardware repair and subsequently returned to the company premises after the repair, it may be reinstalled with malware, or firmware vulnerable to malware. This type of attack leverages trust in the maintenance and repair process to compromise the device. **Impact:** With further exploitation of the vulnerable camera, an external attacker may potentially gain access to a more secure internal network of the intended target, infect other systems, and access confidential data. [PERSON] et al. [44] addressed the **potential risk of cloud-connected IP cameras** that gather a lot of data, which are subsequently sent to cloud storage servers. As a result, IP cameras analyze data to such an extent that it is crucial to evaluate security from the perspective of users' privacy. In IFSEC Global's Video Surveillance 2022 Report [45], the backdoors created by manufactures, including an improper patching process, were deemed to cause the most risk to VSS system customers, at 25%, while 73% of security end-users and consultants said they were worried about the vulnerability of their surveillance systems to cyberattacks. Figure 7: Exploitation diagram for supply chain exploitation technique in a logically air-gapped network. **Security measures:** [PERSON] and [PERSON] [46] highlighted the challenges surrounding the timely resolution of vulnerabilities in IoT devices. They point out that manufacturers typically have a window of 45 to 90 days to address a vulnerability after it is reported by researchers. Some manufacturers release a patch for their products before the vulnerability is publicly disclosed, but unfortunately, this proactive approach is not the norm. A significant challenge arises because, even if a patch is ready, it does not necessarily guarantee that the underlying issue has been fully resolved. Furthermore, disseminating information about a vulnerability and its patch can be challenging, because many **IP cameras rebrand the original product under generic names. ** However, suppose the camera owners are fortunate enough to have a patch for their device. In that case, they will need to know the precise model of the device, visit the manufacturer's website, download the firmware, log into the IP camera, and upload the most recent firmware with the patch, which comes with a warning that it might render their device inoperable. Respondents said that cyber security was the shared responsibility of the whole supply chain, from manufacturers through to integrators and end-users. To effectively combat the \"insider threat\", due diligence is paramount for all parties involved. Manufacturers, integrators/installers, and end-users must establish trust and maintain open channels of communication [47]. **Use cases:** Many video surveillance cameras come from foreign countries and are manufactured by unknown companies. They might have embedded malware, backdoor access accidently included by the manufacture, or have a link to a malicious site and be set up to communicate with that site.