概要

IP surveillance cameras sit at the edge of critical networks. This white paper distills the essential cybersecurity controls for cameras and VMS ecosystems, aligning with widely adopted international frameworks (ETSI EN 303 645, NISTIR 8259A, IEC 62443, ONVIF Security Services, UL 2900-2-3) and Taiwan’s ecosystem (Taiwan IoT Cybersecurity Certification and TAICS TS‑0014 series). It provides a pragmatic control checklist, an implementation blueprint across the device–network–platform stack, and a certification/readiness pathway for Taiwan and global deployments.

Threat Landscape for IP Cameras

• Common attack surfaces: default/weak credentials, outdated firmware, insecure services (e.g., open Telnet/RTSP), insufficient certificate management, command injection via CGI/API, insecure ONVIF implementations, exposed debug interfaces, supply‑chain vulnerabilities, and poor logging.
  
  

• Operational risks: privacy breaches, sabotage of recording, botnet enrollment, lateral movement into OT/IT networks, integrity loss of evidentiary footage, and denial of service on VMS/NVR.

International Standards

• ETSI EN 303 645 (Consumer IoT baseline): No universal default passwords; secure update; vulnerability reporting; secure communication (TLS); data protection; lifecycle support; resilience to outages.
  
  

• NISTIR 8259A (IoT device capability core baseline): Device identity, secure update, secure storage, data protection, configuration, and logging; manufacturer support & vulnerability handling.
  
  

• IEC 62443 (IACS security): Defense in depth for industrial environments, security levels SL1–SL4; requirements for component and system security and secure development lifecycle.
  
  

• ONVIF Security Services: TLS certificate provisioning/rotation, secure profiles usage, policy assignment, hardened service exposure.
  
  

• UL 2900 2 3: Software safety and cybersecurity evaluation for security and life safety signaling components, including digital video equipment.

U.S. Standards
FIPS (Federal Information Processing Standards)
The FIPS series, published by the National Institute of Standards and Technology (NIST), provides security standards and guidelines for U.S. federal agencies and contractors. These standards ensure that information systems, including IP cameras and their networks, meet robust cybersecurity requirements. Some key FIPS standards that relate to IP surveillance systems include:

• FIPS 140‑2 (Cryptographic Module Validation): This standard defines the requirements for cryptographic modules used within information systems. IP cameras using encryption to secure video feeds and control signals must ensure that the underlying cryptographic modules comply with FIPS 140‑2 for federal use. This includes secure key management, encryption algorithms, and protection against cryptographic attacks.
  
  

• For example, IP cameras should use FIPS 140‑2 validated encryption to ensure secure communication of video data and control commands between the camera and the video management system (VMS) or network video recorder (NVR).
  
  

• FIPS 199 (Standards for Security Categorization of Federal Information and Information Systems): This standard helps categorize information systems (including IP surveillance) based on their impact on confidentiality, integrity, and availability. Federal and commercial entities dealing with sensitive security information must adhere to the classification protocols laid out in FIPS 199 to manage risks appropriately.
  
  

• FIPS 200 (Minimum Security Requirements for Federal Information Systems): This specifies the minimum security requirements for all federal information systems. It’s relevant for IP surveillance systems deployed in federal settings where compliance with minimum security controls (such as identity management, access control, and encryption) is required.

NIST Cybersecurity Framework
Alongside FIPS, the NIST Cybersecurity Framework (CSF) provides guidelines for identifying, protecting, detecting, responding, and recovering from cybersecurity threats in critical infrastructure systems, including physical security (e.g., IP cameras).

• NIST SP 800-53 (Security and Privacy Controls for Information Systems and Organizations): NIST’s guidelines cover comprehensive security controls, including:
  
  

• AC-2 (Account Management): Addresses authentication methods, access control policies, and user role management — all crucial for IP camera systems that require strong user authentication and access control.
  
  

• SC-12 (Cryptographic Key Establishment and Management): Relevant for ensuring secure key management in cryptographic modules used in IP cameras, ensuring that all transmitted video data and control signals remain secure.
  
  

• IA-5 (Authenticator Management): Ensures that cameras and VMS systems utilize strong authentication, such as two-factor authentication (2FA), especially for administrative access.
  
  

• NIST SP 800-82 (Guide to Industrial Control Systems Security): For industries that rely on IP surveillance as part of Industrial Control Systems (ICS), this guide helps ensure the safe integration of IP cameras within the wider ICS/SCADA systems.

Taiwan Standards

• Taiwan IoT Cybersecurity Certification (Taiwan Cybersecurity Mark): Conformance scheme harmonized with international baselines; focuses on identity/authentication, firmware update, communication security, system integrity, and physical safeguards for connected devices.
  
  

• CNS-16120 & TAICS TS‑0014 (Video Surveillance System Cybersecurity, Parts 1 & 3): Sector‑specific requirements for cameras and recorders/NVR; defines general cybersecurity requirements and benchmarks.

Device Hardening

• Provisioning: Enforce first‑boot credential change; unique per‑unit secrets; disable anonymous ONVIF.
  
  

• Crypto: TLS 1.2/1.3; only strong ciphers; signed firmware; secure key store (TPM/TEE if available).
  
  

• Services: Disable Telnet; prefer HTTPS/RTSPS; restrict ONVIF to required services; close debug ports.
  
  

• Access: Role‑based access control (RBAC), least privilege, lockouts & rate limits; 2FA for admin portal when feasible.
  
  

• Update: Authenticated updates with rollback protection; publish support window; provide release notes & hashes.
  
  

• Telemetry: Time‑sync (NTP with auth), syslog to SIEM; privacy‑aware logging; tamper events.
  
  

• Secure Defaults: No universal default creds; privacy masking enabled by policy; SD‑card encryption where supported.

Network Controls

• Segmentation: Place cameras on isolated VLAN(s); block east–west traffic; only allow required flows to VMS/NVR.
  
  

• Zero Trust Gateway: Mutual TLS to VMS; certificate pinning where available; strict firewall ACLs (deny‑by‑default).
  
  

• Management Plane: Out‑of‑band admin network; jump‑host with MFA; no direct Internet exposure.
  
  

• Discovery & Inventory: Maintain asset inventory with model/firmware; monitor with NAC; auto‑quarantine rogue devices.

VMS / NVR / CMS Layer

• Identity Federation: Enforce SSO/MFA for operators; fine‑grained RBAC at camera/channel level.
  
  

• Recording Integrity: Hash chains or watermarking for evidentiary footage; secure time sync; secure export workflow.
  
  

• Update Orchestration: Staged camera firmware updates; maintenance windows; automatic rollback on failure.
  
  

• Monitoring: Central syslog; alert on camera offline, tamper, auth failures, config drift; vulnerability scanning cadence.

Taiwan Compliance Pathway

1. Scope & Gap Assessment: Map current controls to ETSI EN 303 645 and NISTIR 8259A baselines; perform TAICS TS‑0014 gap analysis for cameras/NVR.
   
   

2. Implement & Evidence: Close gaps (identity, update, TLS, logging, vulnerability handling). Collect artifacts: threat models, SDL docs, penetration reports, update policy, SBOM.
   
   

3. Pre‑audit Testing: Internal/3rd‑party testing to CNS-16120 & TAICS TS‑0014; verify secure comms (TLS), firmware integrity, auth robustness, service exposure, and logging.
   
   

4. Certification: Submit for Taiwan IoT Cybersecurity Certification; maintain artifacts and vulnerability response channel; align product pages and datasheets.
   
   

5. Lifecycle & Renewal: Track firmware support windows; re‑test after major releases; maintain public advisories and disclosure processes.

Conclusions By aligning design and operations to ETSI EN 303 645 and NISTIR 8259A baselines, elevating device and system security to IEC 62443 expectations, adopting ONVIF Security Services for certificate lifecycle, and pursuing Taiwan’s IoT Cybersecurity Certification using CNS-16120 & TAICS TS‑0014, vendors and integrators can measurably reduce risk and demonstrate compliance in both Taiwan and global markets.

アプリケーション

Regardless of the industry, the secure surveillance solution is mandatory. In high value markets, such as government or finance, the cybersecurity features are even more critical, to prevent hacking, tampering or other abuses.

ソリューション

ACTi provides secure end-to-end solution, containing IP cameras, video management systems and access control systems. The cybersecurity aspects are the top priority for the development teams.