Overview
Explore a detailed DEF CON 32 conference presentation that delves into the security vulnerabilities of surveillance systems and their supply chains. Learn about the growing concerns surrounding CCTV technology, particularly regarding privacy infringement and potential data breaches through hacking or illegal video collection. Discover the researchers' focused analysis of Network Video Recorder (NVR) devices from major market players Hikvision, Dahua, and Synology's Surveillance Station package. Follow their methodology of bypassing U-Boot mitigation to overcome file system extraction challenges, leading to the discovery of multiple vulnerabilities. Understand the implications of their findings through detailed exploit scenarios and gain insights into the broader supply chain security issues affecting modern surveillance systems.
Syllabus
DEF CON 32 - The edges of Surveilance System and its supply chain - Chanin Kim, Myounghun Pak
Taught by
DEFCONConference