Cyber

UL CAP certification

by Mark Rowe

Hanwha Techwin reports that Wisenet7, the company’s proprietary camera chipset, has achieved UL Cybersecurity Assurance Program (UL CAP) certification.

With cybersecurity as a priority for the electronic security industry, the certification enables Hanwha Techwin to validate that its latest Wisenet cameras are equipped with protection from cyber criminals, the Korean firm says.

UL CAP certification is run by US-based UL; it assesses potential cybersecurity issues and the risk from hackers in respect of network-connectable hardware devices and software. Hanwha Techwin is among only a handful of video surveillance manufacturers that have so far achieved the certification for their products and is the only one in Korea.

Although certification usually takes eight to ten months, Hanwha Techwin was able to complete the certification process within three months as the company’s in-house Security Computer Engineering Response Team (S-CERT) had already been working on addressing any potential security vulnerabilities in Wisenet hardware and software. This ensured that Wisenet7 was able to meet all of UL’s thorough evaluation criteria, such as penetration test, access control and user authentication, encryption and software updates.

The Wisenet7 chipset offers:

Secure Boot Verification: This provides an extra layer of security by sandboxing elements of a camera’s operating system, which means they are in a protected space. A full boot is completed before there is communication with any other part of the system. This prevents interruption to the boot process which could be exploited by a hacker.

Secure OS: Wisenet7 uses a separate secure operating system (OS) for encryption and decryption, as well as for verifying that apps have not been modified or are not forgeries. A separate Linux based API is needed to access the Secure OS, without which there is no way to make any changes from the outside of a camera.

Anti-Hardware Clone: This functionality prevents Wisenet7 from being cloned. In addition to protecting intellectual property, this ensures that a Wisenet7 chipset with a Hanwha Techwin label is a genuine copy and removes the risk of a cloned device which may contain malicious software being used to steal sensitive data, such as passwords.

Secure JTAG: JTAG ports are hardware interfaces which are used to programme, test and debug devices. Cyber criminals can gain low level control of a camera via a JTAG port and perhaps replace firmware with a malicious version. Wisenet7 prevents this from happening as it secures JTAG ports via a key-based authentication mechanism to which only authorised personnel working for Hanwha Techwin have access.

Secure UART: UART ports are serial interfaces typically used for debugging cameras. They allow administrator access to a camera and are therefore a target for hackers attempting to access sensitive information, such as password keys. By enforcing restricted and secure access to the UART port, Wisenet7 allows the debugging process to be safely completed without opening the door to cyber criminals.

Uri Guterman, Head of Product & Marketing for Hanwha Techwin Europe said: “Cybersecurity is essential for network video surveillance products as it allows us to provide end-users with confidence in knowing that their confidential data will be kept safe from hackers. Achieving UL CAP certification for Wisenet7 underscores our commitment to equip our next generation of cameras with innovative features that set a new standard for cybersecurity.

“The certification helps us maintain our position as a global leader in a number of different ways. In Europe, Middle East and US, for example, major projects which are subject to a tender process often stipulate that UL CAP certification is required. In the private sector, it is not unknown for sensitive facilities such as laboratories and banks to insist that a supplier should have the certification.

“As such, Wisenet7’s CAP certification enables us to more actively promote our cybersecurity features as one of Hanwha Techwin’s strengths.”

Visit https://www.hanwha-security.eu/.

Related News

  • Cyber

    Chief Marketing Officer

    by Mark Rowe

    The cyber and risk software firm SureCloud has appointed Caren Havelock to a new position of Chief Marketing Officer. She joins from…

  • Cyber

    Force of Zero Trust

    by Mark Rowe

    Among the cyber predictions for 2022, Kurt Glazemakers, CTO at the secure remote access software firm Appgate, comments on how more organisations…

Newsletter

Subscribe to our weekly newsletter to stay on top of security news and events.

© 2024 Professional Security Magazine. All rights reserved.

Website by MSEC Marketing