The availability of IP network-based video surveillance systems has transformed the way businesses are able to make the best use of resources to ensure that their assets are protected.
A feature of video over IP is the ability to control cameras and view live or recorded images from anywhere on the network. This means that a security manager can be based anywhere, yet have immediate access to high resolution images to allow them to analyse any incident and if appropriate, pass the evidence on.
With high definition IP network cameras and domes increasingly being used by companies to capture evidence grade images of activity at their head offices and branches, there is the potential for would be fraudsters to gain access to valuable and confidential data. Deployment of external IP cameras requires the provision of an external network connection to the IP camera device and these external connections could be subject to malicious tampering to gain access to a company’s internal network. Although much can be done to secure and isolate network connections with a fully-managed network switch, and even deploying an entirely separate network for the surveillance system, there are still risks associated with these approaches.
These concerns are particularly relevant where it might theoretically be possible to disconnect an externally-mounted IP camera, access the network through this connection, and potentially detect and disable the other cameras and/or the network video recorder itself. If the surveillance network is bridged to, or part of, the main network, it might even potentially be possible for a well-prepared, highly-skilled attacker to access or otherwise disrupt other systems on that network.
Made by UK based Veracity and available exclusively via Samsung Techwin Europe, LINKLOCK provides a barrier to all unauthorised network access by fully blocking connections to any cable or equipment that has been tampered with or disconnected. It works by completely disconnecting data and power from the coaxial cable link, providing complete isolation of the affected link. This makes it an ideal protection measure for security-critical installations, such as at banks, where network cabling or video surveillance equipment might be located externally to detect, monitor and record evidence of criminal activity including vandalism, ATM skimming and armed robbery, as well as to remotely monitor premises out of business hours.
How?
LINKLOCK, available as an option on Veracity’s HIGHWIRE Powerstar range of Ethernet and POE over coax adaptors, can be used with any make, model or type of IP camera. On a standard video surveillance system, having a secure or encrypted link over the coax alone does not prevent intrusion as the Ethernet link to the camera would still be open and unsecured. The HIGHWIRE coaxial connection uses a secure proprietary baseband protocol which is point-to-point only. POE over coax powers the HIGHWIRE adaptor at the camera end and the camera itself. However, any attempts to “tap into” or disconnect the coax or network connections is detected by the LINKLOCK base unit which immediately disables POE and data. As result, all external equipment is immediately and completely isolated from the internal LAN.
The LINKLOCK blocking mode cannot be reversed through the external network or coaxial interface. To return to normal operation, the HIGHWIRE LINKLOCK base unit inside the building must be physically reset by a contact closure switch across screw terminals on the unit itself. This protection does not depend on the IP camera being powered by PoE. If powered by a local power supply, the IP camera will still operate when the LINKLOCK blocking mode is triggered, but there will be no communication whatsoever through the coaxial cable. The blocking mode will still work even if a camera is externally powered by an attacker before they attempt to tamper. This is because the Ethernet signal or the HIGHWIRE coax signal must still be physically re-connected or “tapped into” to connect a third party (attacker) device. This will be detected as normal and will trigger the blocking mode.
With several high profile cases recently in the news, LINKLOCK provides a solution for businesses (and particularly those who have a duty of care to protect data), that wish to capitalise on video over IP without creating an opportunity for criminals to hack into the network.
Visit www.samsungsecurity.co.uk.
