8/8/2019 BlackHat DC 2010 Marpet Video Analytics Video Surveillance and You Slides
1/30
Physical Security inPhysical Security in
Video SuVideo SuVideo AnalytVideo Analyt
a Networked Worlda Networked World
veillance,veillance,
cs, and You.cs, and You.
Joshua A. Marpet.
8/8/2019 BlackHat DC 2010 Marpet Video Analytics Video Surveillance and You Slides
2/30
Joshua
Who is this guy?
Josh has done ever thin . I've been a co an
member, a volunteer fireman, a blacksmith an
My passion is the chasm between Information'
perform SQL injection on others. So what if on
I love breaking into places, and showing the ppro em.
arpet
Infra ard/OWASP/HTCIA/FLEA and ASTM
a horse dentist. No joke.
ecurity and Physical Security. What. . ,
e's on a web page, and one's on a door?
ople who secured it, how to fix the
8/8/2019 BlackHat DC 2010 Marpet Video Analytics Video Surveillance and You Slides
3/30
Video Sur
Prevalence How often does a camera lLegality When can someone record me
Hackability Video System Hacks
Compression SchemasVideo Seizure Lessons
eillance
ok at me every day?
8/8/2019 BlackHat DC 2010 Marpet Video Analytics Video Surveillance and You Slides
4/30
Prevalence
8/8/2019 BlackHat DC 2010 Marpet Video Analytics Video Surveillance and You Slides
5/30
8/8/2019 BlackHat DC 2010 Marpet Video Analytics Video Surveillance and You Slides
6/30
LegalityTo help protectyour pri vacy,PowerPointprevented thisexternalpicturefrombeing automatically downloaded.To download and displ ay thispicture,click Optionsin theMessageBar,and then click Enableexternalcontent.
To help protectyour privacy,PowerPointprevented thisexternalpicturefrombeing automatically downloaded.To download and display thispicture,click Optionsin theMessageBar,and then click Enableexternalcontent.
8/8/2019 BlackHat DC 2010 Marpet Video Analytics Video Surveillance and You Slides
7/30
8/8/2019 BlackHat DC 2010 Marpet Video Analytics Video Surveillance and You Slides
8/30
8/8/2019 BlackHat DC 2010 Marpet Video Analytics Video Surveillance and You Slides
9/30
Hackability
NannyCam
May
Leave
aHome
Exposed
SatApr13,2:55PMET
ByJOHNSCHWARTZTheNewYorkTimes
Thousandsof
people
who
have
installed
apo
intendingtoincreasethesecurityoftheirho
unknowinglyopenedawindowontheiractivi
cheapreceiver.
Thewireless
video
camera,
which
is
heavily
a
intendedtosenditsvideosignaltoanearbyb
viewedonacomputeroratelevision.Butitss
moret anaquarterm eaway yo t es e
lessthan$250.
ularwireless
video
camera,
esandoffices,haveinstead
iestoanyoneequippedwitha
vertisedon
the
Internet,
is
asestation,allowingittobe
ignalcanbeinterceptedfrom
e ectron cequ pmentcost ng
8/8/2019 BlackHat DC 2010 Marpet Video Analytics Video Surveillance and You Slides
10/30
Compression Schemas
H.264 / MPEG-4 AVCOverview
H.264 is also known as MEPG-4 AVC. H.264 uses the lattechnology to provide consistently crisp and clear video f
* H.264 delivers incredible video quality at data rates ovideo formats
* H.264 offers dramatically lower bit rates and better pi
H.263+s mes more e c en an - . an e s z
MPEG-2 Codecs* It is easy to integrate and covers wide range of pictur
segment.
Cons* H.264 requires longer encoding time* It is certainly not constricted and low-bandwidth frien* More Hardware overhead is also one of the limiting f* Licensin a reements are com licated.
MPEG-4OverviewMPEG-4 is a standard currently under development for th
. , ,interactivity.
Pros* Good image quality at low data rates
Cons* Standard is still being designed
st innovations in video compressionr the best possible viewing.
e-fourth to one-half the size of previous
ture quality than MPEG-2, MPEG-4 or
e s mes sma er an compara e
format. Hence used in large application
lyctor
e delivery of interactive multimedia across, ,
8/8/2019 BlackHat DC 2010 Marpet Video Analytics Video Surveillance and You Slides
11/30
8/8/2019 BlackHat DC 2010 Marpet Video Analytics Video Surveillance and You Slides
12/30
CSI Eff ct
8/8/2019 BlackHat DC 2010 Marpet Video Analytics Video Surveillance and You Slides
13/30
Reliability Is it Consistent?Validit Does it alarm for the correct conditionsImplementation How do I get this?Hacking How do I break it?
a s
Interprettime, or p
There arincluding:
Facial ReLicense
Package
People CIncidentMotion/Tr
CurrencySmoke a
eo na y cs
tion of a video stream, done either in realerformed on a recorded stream.
different types of Video Analytics,
cognitionlate Recognition
Leave Behind -
ountinglertingajectory Tracking
Checkingd Fire Alerting
8/8/2019 BlackHat DC 2010 Marpet Video Analytics Video Surveillance and You Slides
14/30
Photomanipulation a type of Video analytics
8/8/2019 BlackHat DC 2010 Marpet Video Analytics Video Surveillance and You Slides
15/30
8/8/2019 BlackHat DC 2010 Marpet Video Analytics Video Surveillance and You Slides
16/30
License Plate ecognition
8/8/2019 BlackHat DC 2010 Marpet Video Analytics Video Surveillance and You Slides
17/30
People Countin
Line-CrossingTripwire
8/8/2019 BlackHat DC 2010 Marpet Video Analytics Video Surveillance and You Slides
18/30
8/8/2019 BlackHat DC 2010 Marpet Video Analytics Video Surveillance and You Slides
19/30
8/8/2019 BlackHat DC 2010 Marpet Video Analytics Video Surveillance and You Slides
20/30
8/8/2019 BlackHat DC 2010 Marpet Video Analytics Video Surveillance and You Slides
21/30
8/8/2019 BlackHat DC 2010 Marpet Video Analytics Video Surveillance and You Slides
22/30
8/8/2019 BlackHat DC 2010 Marpet Video Analytics Video Surveillance and You Slides
23/30
8/8/2019 BlackHat DC 2010 Marpet Video Analytics Video Surveillance and You Slides
24/30
To help protectyour privacy,PowerPointprevented thisexternalpicturefrombeing automatically downloaded.To downl oad and display thispicture,click Optionsin theMessageBar,and then click Enableexternalcontent.
To help protectyour privacy,PowerPointprevented thisexternalpicturefrombeing automatically downloaded.To download and display thispicture,click Optionsin theMessageBar,and then click Enableexternalcontent.
To help protectyour privacy,PowerPointprevented thisexternalpicturefrombeing automatically downloaded.To download and display thispicture,click Optionsin theMessageBar,and then click Enableexternalcontent.
To help protectyour privacy,P
owerPointprevented thisexternalpicturefrombeing automatically downloaded.To download and display thispicture,click Optionsin theMessageBar,and then click Enableexternalcontent.
8/8/2019 BlackHat DC 2010 Marpet Video Analytics Video Surveillance and You Slides
25/30
8/8/2019 BlackHat DC 2010 Marpet Video Analytics Video Surveillance and You Slides
26/30
.2. City Buildings will respons like living orga4. Smarter Cities will quench cities thirst for
5. Cities will respond to a crisis, even before
isms.ater and save energy
receiving an emergency phone call.
ImplemImplem ntationntation
8/8/2019 BlackHat DC 2010 Marpet Video Analytics Video Surveillance and You Slides
27/30
ImplemImplemProblemsProblems
Customers expect it to be a magic bullet,capable of spotting criminals and terrorists
'Integrators don't realize how much timeand effort it takes to train the system.
Total screwup of implementations is.It's fairly sensitive technology, able to beavoided with a few simple steps.The consequences of adding Video
na yt cs to t e corporate networ are not
foreseen.The consequences of adding VideoAnal tics to the cor orate stora e San arenot foreseen.
ntationntation
SuggestionsSuggestions
Have a manufacturer's representative goover the requirements with you, and signoff on them, that the Video Analytics
s stem will erform to those s ecs.Use the manufacturer's rep to help withcalibration and installation.Have clearly defined goals for the system.
'
show the client how the system works, andwhat it cannot do.Train at least one person at the client howto maintain and calibrate the system, soyou don't get called out to do it many many
many times.Demonstrate to the client, and have themsign off on the system, after that havetested it with their own people.
8/8/2019 BlackHat DC 2010 Marpet Video Analytics Video Surveillance and You Slides
28/30
Video Analytics Hacking
Non-Techie Hacks
8/8/2019 BlackHat DC 2010 Marpet Video Analytics Video Surveillance and You Slides
29/30
Video Analytics Tech Hacks
Lots of Video servers run these
OS'es, and all IP cameras have- , norma y go ng s ra g
to the Corporate Network
8/8/2019 BlackHat DC 2010 Marpet Video Analytics Video Surveillance and You Slides
30/30
Conclusi
Joshua Marpetqua ng a a evas a on.c
ons?
om