Secure Video StreamingProxy Server

A Proof of Concept PrototypeBora Güngören

Portakal Teknoloji

bora@portakalteknoloji.com

The Case

Security by surveillance is evolving from closed circuit TV (CCTV) to IP based large scale camera networks. İstanbul 3.500 vehicle, 570 fixed cameras

operational. Ankara 1.500 cameras operational. London 500.000 cameras operational.

Personal use of camera technology is enhancing. Nanny-cams, private security networks, time-motion

studies.

The Disaster?

Camera networks hacked. Fake visuals inserted. Used for terrorist propaganda.

Camera networks hijacked. Used as boarding platform to access other critical

infrastucture. Such as

Police, Firefighting, Ambulance Road management Taxes

False Sense of Protection

Reliance on closed circuit operation. But is it really closed circuit?

IP cameras really operate on public internet. Rarely using untested SSL implementations. Simple password type authentication. No protection against DoS attacks.

Cameras accessed by public infrastructure. 411 of 570 İstanbul MOBESE cams viewed real time

by public. Soon video clips for traffic fines will be displayed.

Extras?

Increasing size of systems and increasing interest on camera networks.

Personal concerns on what is being recorded and need to see it real-time.

Use of videos as evidence means evidence needs to be publicly accessible.

Use of wireless communications. Almost all means scalability to engineers.

Solution

Solution employs a set of common architectural pattern. Reverse Proxy for

Security Reverse Proxy for

Caching

ClientReverse Proxy Source

Security

Scalability

Solution

Security involves Advanced authentication of sources (ie cameras) Advanced authentication of clients (ie viewing

software) Better transport level security

Scalability involves In-memory distributed caching of video content

(similar to youtube) Better video streaming technology, including those

geared towards mobile devices

This Project

Project will not commercialize anything. It is more like an engineering exercise. But it should produce a working example.

A proof of concept prototype using a few (2-5) real camera feeds and a number of (20-100) automated camera feeds (divx playback?) will be developed. Project team can focus on either security or

scalability. Team should plan for how to test and document

the system as well.

This Project

Strictly open source. All infrastructure should be based on open source

components. All new code should be hosted on SF or Google

Code