基于扫描分析的视频监控网络安全现状及对策研究

Research on Current Situation and Countermeasures of Video Surveillance Network Security Based on Scanning Analysis

摘要:

当前国内视频监控领域普遍呈现监控设备种类众多，但普遍由于资产底数不清、弱口令问题严重、管理体系不健全、安全标准缺乏和系统防护不足等问题带来诸多安全隐患，面临着严峻的网络安全挑战。结合2019年全国视频监控网络安全现场检查工作，对某省两地市采用基于主动扫描的资产识别技术开展检查，通过对裸露在互联网的视频监控系统的安全性以及视频监控网络安全检查的数据进行分析，发现在前端接入、系统应用、安全域边界和安全管理四方面存在风险和隐患。最后提出从技术和管理两个角度逐步提升国内视频监控网络的安全管理和风险防范能力。

Abstract:

Currently, there are many types of surveillance equipment in the domestic video surveillance field. Due to the unclear asset base, serious weak password problems, imperfect management system, lack of security standards and insufficient system protection, there are many hidden dangers and security challenges. Combined with the national video surveillance network security on-site inspection work in 2019, inspections were carried out in two cities based on active scanning. Through the analysis of the security of the video surveillance system exposed on the Internet and the data of the video surveillance network security inspection, it is found that there are risks and hidden dangers in four aspects: front-end access, system application, security domain boundary and security management. Finally, it is proposed to gradually improve the security management and risk prevention capabilities of the domestic video surveillance network from two perspectives of technology and management.