Getting Started with Security Cameras

Ralph May

github.com/ralphte

@ralphte1

scooder bandet

warning

  • Talking IP Cameras Only

  • Not selling / or advertising anything

  • Lots of China Software / hardware

  • Not going to talk about every vendor

AGENDA

fundementals

consumer

enterprise

NVR

security

deployment

FUNDAMENTALS

camera components

  1. Lense
  2. Camera sensor
  3. Processor
  4. Light / IR
  5. Storage
    1. ROM
    2. SD/Card
  6. Power supply
  7. housing/case
  8. Microphone

camera components

lense size

VIDEO RESOLUTION

video compression

  • Types
    • MJPEG
    • MPEG4
    • H264
    • H265
    • H265 (Smart)
  • Bitrate
  • Frames Per Second

All of these values create file size and quality 

Processor / transcoding

  • Video Ecoding
    • FPGA
    • Can be multipal streams
  • NPU
    • Identify Objects
  • Processor
    • Custom firmware
    • Web Interface
    • other network services
  • ISP (Image Processor)
    • SOC or discrete 

Processor / transcoding

Night Vision

  • Active IR

  • Artificial Light

  • Low light sensor

  • Full Color Night

camera Zoom

  • optical zoom

  • Varifocal

AI/Deep learning (Buzzz words)

  • Face Detection

  • Object identication

  • people counting

  • Automated License Plate Reader (ALPR)

  • People tracking

  • Missing Object

people tracking

ALPR

Networking

  • POE / POE+

  • WiFi

  • TCP/IP

ONVIF (Open Network Video Interface Forum)

  • Profile g

    • edge storage and retrieval

  • profile m

    • metadata and events for analytics applications

  • ​Profile S

    • ​basic video streaming

  • ​Profile T

    • ​Advanced Video Streaming

 

RTSP / SRTSP

  • Supports Authentication

    • Username / Password 

  • Supports Encyption

    • Encrypts data in transit

 

Extra Protocals

  • DDNS

  • SMTP

  • Bonjour

  • Muticast

  • 802.1x

  • QOS

camera houseing

  • Bullet

  • Dome

  • Torret

  • Fish Eye

  • PTZ

  • Box

bullet

torret

dome

fish eye

ptz

wide angle / Muti lense

box

NVR / VMS

NVR Types

Standalone 

Software/OPen

Cloud

Standalone

 

  • Tied to camera brand

  • Usually Provides POE

  • Dedicated for Video Recording

  • Storge

  • max cameras / max ports

  • license included

Software

 

  • Vendor Agnostic

  • Provides more scaling 

  • per camera recording cost

  • Bring your own storage

  • Redundancy

  • Transcoding

  • Better software

milestone software

 

  • Very Powerfull Software

  • Enterprise ready 

  • Windows Only

  • Free 8 camera license

  • Expansive $100 per camera/license

  • Mobile App

https://www.milestonesys.com/

BLue IRiS Software

 

  • Powerfull Home/business NVR

  • Not Enterprise ready 

  • Windows Only

  • Great value $80

  • Up to 64 cameras

  • Great mobile app

https://blueirissoftware.com/

dwspectrum / NX wtiness

 

  • Powerfull NVR

  • Enterprise ready 

  • Windows/linux/mac/arm

  • onetime license $80/camera

  • great multi os platform

  • mobile app

https://dwspectrum.com/

https://www.networkoptix.com/

cloud

https://www.verkada.com/

https://www.rhombus.com

  • On device NVR

  • Web Interface

  • Extremely Scalable

  • Low management cost

  • Cloud / local storage

  • Higher Camera Cost

  • License Cost

security

Best practice

  • Isolated network/VLAN

  • Secure RTSP

  • Disable internet access/back door cant call home

  • Unique Device Passwords

  • Keep Updated

  • Video Encryption

  • VPN for remote access

deployment

Best practice

  • decide what you care about

  • pick cameras and placement

  • create a simple map of where you want cameras

  • test out the quility 

  • Pick your features

  • plan how to run the wire

  • create a cost ESTIMATE

consumer

avoid

  • Required Subscription (Life time cost VERY high)

    • Ring

    • Arlo

    • Google

    • Amazon

  • Cloud Recording

  • WiFi (Inside Only)

  • BATTERY POWERED (DON'T DO THIS)

    • BATTERIES DIE

    • CANT RECORD 24/7

    • NEW HOME TASK

Reolink

  • Local Recording (No Cloud)

  • Very Affordable

  • AI Event detection

  • POE and Wifi versions

  • No Subscription

  • No license cost

  • Works with NVR or SD Card

  • Doorbell

unifi

  • TurnKey (Auto Updating)

  • Local Recording (No Cloud)

  • Affordable

  • AI Event detection

  • POE and Wifi versions

  • No Subscription

  • No License Cost

  • Requires NVR

  • Doorbell

hikvison/dahua

  • MAUNAL SETUP

  • CHINA (NOT GOVERMENT APRROVED)

  • AI EVENT DETECTION

  • POE AND WIFI VERSIONS

  • NO SUBSCRIPTION

  • NO LICENSE COST

  • WITH OR WITHOUT NVR

  • ENTERPRISE QUALITY

  • VERY LARGE CAMERA SELECTIOn

  • REQUIRES NVR (ONVIF)

enterprise

unifi

  • TurnKey (Auto Updating)

  • Local Recording (No Cloud)

  • Affordable

  • AI Event detection

  • POE and Wifi versions

  • No Subscription

  • No License Cost

  • Requires NVR

  • Doorbell

AXIS/Pelco

  • US Gov Approved (NDAA SEA Compliant)

  • Local Recording (No Cloud)

  • highest price

  • AI Event detection

  • POE and Wifi versions

  • No Subscription

  • License Cost

  • Requires NVR (ONVIF)

  • very large catalog

  • Own VMS

Verkada / Rhombus

  • On device NVR

  • Web Interface

  • Extremely Scalable

  • Low management cost

  • Cloud / local storage

  • Higher Camera Cost

  • License Cost

resources

https://ipcamtalk.com/

https://www.youtube.com/@The_Wildcat

https://www.youtube.com/@TheHookUp

Links

SHAMELESS PLUG...

Three Days / Tampa, FL

- Pre-sales & Authorization

- Remote Reconnaissance

- Digital Surveillance

- Surreptitious Entry Tactics

- Badge Cloning & Replication

- Post-Exploitation

- Live Facility Breach Exercise

 

https://physicalexploit.com/

Upcoming Dates (2024):

 

July 17 - 19

October 16 - 18

PRIVATE TRAINING AVAILABLE

Tooling Available

https://store.physicalexploit.com/