Threat analysis of video surveillance system and security solutions

No Thumbnail Available
Journal Title
Journal ISSN
Volume Title
Perustieteiden korkeakoulu | Master's thesis
Date
2023-01-23
Department
Major/Subject
Security and Cloud Computing
Mcode
SCI3084
Degree programme
Master’s Programme in Computer, Communication and Information Sciences
Language
en
Pages
73
Series
Abstract
Nowadays, video surveillance systems are widely used by companies and private customers to enhance the security of the desired area. Modern video surveillance systems can offer continuous surveillance and provide a diverse set of features for maintaining security and incident investigation at a high level. Such features include playback, fast-forwarding video functions; face, car plates, and object recognition; alarms notifying about suspicious movement detection on the video camera, and many others. These features are supported by such services as artificial intelligence servers and web applications. However, new technologies and services that create these features cause new vulnerabilities and threats in the system. This thesis describes video surveillance system architecture and confidential information data flow in the system, explores threats, and system assets, proposes methods for risk assessment and threat prioritization for the video surveillance system's services, and presents a risk assessment on the example of a web application. The main contribution is the extensive threat analysis of the system components following the STRIDE model and risk assessment based on the identified threats. Furthermore, this work proposes several technical solutions for video surveillance system security: physical and information security, privacy protection, access right violation prevention, and system reliability support.
Description
Supervisor
Aura, Tuomas
Thesis advisor
Nyyssönen, Mika
Keywords
video surveillance, threat model, security, cameras, web application
Other note
Citation