Eyes on IZON: Surveilling IP Camera Security

Presented at THOTCON 0x5 (2014), April 25, 2014, 5:30 p.m. (45 minutes).

Home IP cameras are becoming increasingly common thanks to sleek designs, WiFi connectivity, and intuitive mobile applications. Previously, such IP cameras were mostly in-use by home security aficionados and small business owners. Now, however, with increasing video quality and ease of use, these cameras are becoming popular for the average homeowner that wants a bit more confidence that all is well when they're absent. This presentation will provide insight into the security mechanisms being used by the IZON camera, some of the weaknesses found during research, and a few recommendations for them (or anyone else developing these sorts of cameras) to benefit from. Attention will be paid to topics such as network protocols, iOS app security, APIs, and other aspects of the camera's platform that has attack surface.

Presenters:

• Mark Stanislov
  Mark Stanislav is the Security Evangelist for Duo Security, an Ann Arbor-based startup focused on two-factor authentication and mobile security. With a career spanning over a decade, Mark has worked within small business, academia, startup, and corporate environments, primarily focused on Linux architecture, information security, and web application development. Mark earned his Bachelor of Science Degree in Networking & IT Administration and his Master of Science Degree in Technology Studies, focused on Information Assurance, both from Eastern Michigan University. Mark also holds his CISSP, Security+, Linux+, and CCSK certifications.

Similar Presentations:

• Still Hacking Anyway (SHA2017) / Hands up, don't shoot. Unless with a bodycam.
• DEF CON 27 (2019) / Say Cheese - How I Ransomwared Your DSLR Camera
• Black Hat Asia 2020 Virtual / The Evil of Spy Camera