A Testing Methodology for the Internet of Things Affordable IP Cameras

Dzwigala, Grazyna; Ghaleb, Baraq; Aldhaheri, Talal A.; Wadhaj, Isam; Thomson, Craig; Al-Zidi, Nasser M.

Abstract

IP cameras are becoming a cheaper and more convenient option for a lot of households, whether it being for outdoor, indoor security, or as baby or pet monitors. Their security, however, is often lacking, and there is currently no testbed that focuses and evaluates security of the most affordable cameras on the market. The aim in this paper is to propose a methodology to evaluate the security of IP cameras used in households these days. Methodology proposed consists of five phases that evaluate different areas of chosen IP cameras, from default settings, through software and network connections analysis, to web application testing as well as untested firmware. After performing testing on two IP cameras that were taken into account—Wansview Q5 and Tapo C100, it has been concluded that Wansview Q5 is a more secure choice. Main security recommendations based on the results were to allow users to decide on their settings and disable any open ports that are not in use, as well as update the outdated software.

Citation

Dzwigala, G., Ghaleb, B., Aldhaheri, T. A., Wadhaj, I., Thomson, C., & Al-Zidi, N. M. (2022). A Testing Methodology for the Internet of Things Affordable IP Cameras. . Springer. https://doi.org/10.1007/978-981-19-2130-8_37

• Online Publication Date: Aug 19, 2022
• Publication Date: 2022
• Deposit Date: Oct 17, 2022
• Publisher: Springer
• Pages: 463-479
• Series Title: Lecture Notes in Networks and Systems
• Series Number: 461
• Series ISSN: 2367-3370
• ISBN: 978-981-19-2129-2
• DOI: https://doi.org/10.1007/978-981-19-2130-8_37
• Keywords: Cyber security, IP cameras, Pentesting, Internet of Things, IoT attacks
• Public URL: http://researchrepository.napier.ac.uk/Output/2915565