Security Analysis of IP-cameras Aalborg University Group DS101F21 Software 10: "Security Analysis of Abstract: This project is about a security analysis of IP-cameras" IP-cameras and developing a solution to improve the security through automated firmware updates. We found it implausible to Group DS101F21 perform automated testing on firmware images to detect known vulnerabilities May 28, 2021 through the analysis. The solution developed through this project is an automated update framework that Semester: relies on the device manufacturers to develop 10. semester and maintain firmware updates for the Project theme: devices. Through said updates, the overall Security security of their devices would increase, but Project duration: only if the end-user applies the updates. We 1/02/2021 - 28/05/2021 propose a solution that can automate and ECTS: streamline the update process on IP-cameras 30 from multiple manufactures. Supervisor: The overall conclusion of this project is that René Rydhof Hansen the current approach to firmware
[email protected] development, distribution, and consumption Danny Bøgsted Poulsen are all contributing factors to the security of
[email protected] IP-cameras in general. The solution Authors: Thomas Lundsgaard Kammersgaard developed in this project automates the
[email protected] update process for IP-cameras produced by Thue Vestergaard Iversen Hikvision and Herospeed. This is done by
[email protected] selecting the correct firmware and making sensible choices such as calculating checksum matches, performing backups and reapplying user configurations. Number of pages: 84 Everyone is permitted to copy and distribute verbatim copies of this document. Preface This report was written by two Software students from group DS101F21 at Aalborg University during their 10th semester in Software Engineering.