blackhat dc 2010 marpet video analytics video surveillance and you slides

8/8/2019 BlackHat DC 2010 Marpet Video Analytics Video Surveillance and You Slides

1/30

Physical Security inPhysical Security in

Video SuVideo SuVideo AnalytVideo Analyt

a Networked Worlda Networked World

veillance,veillance,

cs, and You.cs, and You.

Joshua A. Marpet.


2/30

Joshua

Who is this guy?

Josh has done ever thin . I've been a co an

member, a volunteer fireman, a blacksmith an

My passion is the chasm between Information'

perform SQL injection on others. So what if on

I love breaking into places, and showing the ppro em.

[email protected]

arpet

Infra ard/OWASP/HTCIA/FLEA and ASTM

a horse dentist. No joke.

ecurity and Physical Security. What. . ,

e's on a web page, and one's on a door?

ople who secured it, how to fix the


3/30

Video Sur

Prevalence How often does a camera lLegality When can someone record me

Hackability Video System Hacks

Compression SchemasVideo Seizure Lessons

eillance

ok at me every day?


4/30

Prevalence


5/30


6/30

LegalityTo help protectyour pri vacy,PowerPointprevented thisexternalpicturefrombeing automatically downloaded.To download and displ ay thispicture,click Optionsin theMessageBar,and then click Enableexternalcontent.

To help protectyour privacy,PowerPointprevented thisexternalpicturefrombeing automatically downloaded.To download and display thispicture,click Optionsin theMessageBar,and then click Enableexternalcontent.


7/30


8/30


9/30

Hackability

NannyCam

May

Leave

aHome

Exposed

SatApr13,2:55PMET

ByJOHNSCHWARTZTheNewYorkTimes

Thousandsof

people

who

have

installed

apo

intendingtoincreasethesecurityoftheirho

unknowinglyopenedawindowontheiractivi

cheapreceiver.

Thewireless

video

camera,

which

is

heavily

a

intendedtosenditsvideosignaltoanearbyb

viewedonacomputeroratelevision.Butitss

moret anaquarterm eaway yo t es e

lessthan$250.

ularwireless

video

camera,

esandoffices,haveinstead

iestoanyoneequippedwitha

vertisedon

the

Internet,

is

asestation,allowingittobe

ignalcanbeinterceptedfrom

e ectron cequ pmentcost ng


10/30

Compression Schemas

H.264 / MPEG-4 AVCOverview

H.264 is also known as MEPG-4 AVC. H.264 uses the lattechnology to provide consistently crisp and clear video f

* H.264 delivers incredible video quality at data rates ovideo formats

* H.264 offers dramatically lower bit rates and better pi

H.263+s mes more e c en an - . an e s z

MPEG-2 Codecs* It is easy to integrate and covers wide range of pictur

segment.

Cons* H.264 requires longer encoding time* It is certainly not constricted and low-bandwidth frien* More Hardware overhead is also one of the limiting f* Licensin a reements are com licated.

MPEG-4OverviewMPEG-4 is a standard currently under development for th

. , ,interactivity.

Pros* Good image quality at low data rates

Cons* Standard is still being designed

st innovations in video compressionr the best possible viewing.

e-fourth to one-half the size of previous

ture quality than MPEG-2, MPEG-4 or

e s mes sma er an compara e

format. Hence used in large application

lyctor

e delivery of interactive multimedia across, ,


11/30


12/30

CSI Eff ct


13/30

Reliability Is it Consistent?Validit Does it alarm for the correct conditionsImplementation How do I get this?Hacking How do I break it?

a s

Interprettime, or p

There arincluding:

Facial ReLicense

Package

People CIncidentMotion/Tr

CurrencySmoke a

eo na y cs

tion of a video stream, done either in realerformed on a recorded stream.

different types of Video Analytics,

cognitionlate Recognition

Leave Behind -

ountinglertingajectory Tracking

Checkingd Fire Alerting


14/30

Photomanipulation a type of Video analytics


15/30


16/30

License Plate ecognition


17/30

People Countin

Line-CrossingTripwire


18/30


19/30


20/30


21/30


22/30


23/30


24/30

To help protectyour privacy,PowerPointprevented thisexternalpicturefrombeing automatically downloaded.To downl oad and display thispicture,click Optionsin theMessageBar,and then click Enableexternalcontent.



To help protectyour privacy,P

owerPointprevented thisexternalpicturefrombeing automatically downloaded.To download and display thispicture,click Optionsin theMessageBar,and then click Enableexternalcontent.


25/30


26/30

.2. City Buildings will respons like living orga4. Smarter Cities will quench cities thirst for

5. Cities will respond to a crisis, even before

isms.ater and save energy

receiving an emergency phone call.

ImplemImplem ntationntation


27/30

ImplemImplemProblemsProblems

Customers expect it to be a magic bullet,capable of spotting criminals and terrorists

'Integrators don't realize how much timeand effort it takes to train the system.

Total screwup of implementations is.It's fairly sensitive technology, able to beavoided with a few simple steps.The consequences of adding Video

na yt cs to t e corporate networ are not

foreseen.The consequences of adding VideoAnal tics to the cor orate stora e San arenot foreseen.

ntationntation

SuggestionsSuggestions

Have a manufacturer's representative goover the requirements with you, and signoff on them, that the Video Analytics

s stem will erform to those s ecs.Use the manufacturer's rep to help withcalibration and installation.Have clearly defined goals for the system.

'

show the client how the system works, andwhat it cannot do.Train at least one person at the client howto maintain and calibrate the system, soyou don't get called out to do it many many

many times.Demonstrate to the client, and have themsign off on the system, after that havetested it with their own people.


28/30

Video Analytics Hacking

Non-Techie Hacks


29/30

Video Analytics Tech Hacks

Lots of Video servers run these

OS'es, and all IP cameras have- , norma y go ng s ra g

to the Corporate Network


30/30

Conclusi

Joshua Marpetqua ng a a evas a on.c

ons?

om

blackhat dc 2010 marpet video analytics video surveillance and you slides

Documents