Video surveillance systems are widely deployed with large systems for use in strategic places such as home security, public transportation, banks, ATM centers, city centers, airports, and public roads, and play a vital role in protecting critical infrastructures. As various attacks are possible in these systems, identifying attacks and considering suitable security measures are essential. In this paper, we present a detailed review of existing and possible threats in video surveillance, CCTV, and IP-camera systems. This provides insight for the better identification of the security risks associated with the design and deployment of these systems and promotes further research in this emerging field. We also present countermeasures to prevent and protect the surveillance systems from various security attacks.

Industrial Automation and Control Systems (IACS) are broadly utilized in critical infrastructures for monitoring and controlling the industrial processes remotely. The real-time transmissions in such systems provoke security breaches. Many security breaches have been reported impacting society severely. Hence, it is essential to achieve secure communication between the devices for creating a secure environment. For this to be effective, the keys used for secure communication must be protected against unauthorized disclosure, misuse, alteration or loss, which can be taken care of by a Key Management Infrastructure. In this paper, by considering the generic industrial automation network, a comprehensive key management infrastructure (CKMI) is designed for IACS. To design such an infrastructure, the proposed scheme employs ECDH, matrix method, and polynomial crypto mechanisms. The proposed design handles all the standard key management operations, viz. key generation, device registration, key establishment, key storage, device addition, key revocation, key update, key recovery, key archival, and key de-registration and destruction. The design supports secure communication between the same and different levels of IACS devices. The proposed design can be applied for major industrial automation networks to handle the key management operations. The performance analysis and implementation results highlight the benefits of the proposed design.

Supervisory Control and Data Acquisition (SCADA) systems are widely used in critical infrastructures and contemporary industrial processes. The advancements and increased interconnections lure the adversary to plunder the reliable operations of these systems. As the persistent monitoring and remote control is necessary to ensure reliable operations of the system, fortifying the security features of SCADA systems is crucial. In this paper, by considering the efficiency requirements in such networks, we propose a key establishment scheme for SCADA systems based on polynomial key distribution scheme. In this new approach, secret key is not transmitted in the network for any device to device communications. The proposed key establishment scheme supports broadcasting, multicasting, join and leave operations and secure communications between and across MTU-SUBMTU-Field devices of SCADA systems. The scheme also considers the constraints such as communication overhead, performance, bandwidth and accuracy to provide an elegant key establishment scheme for SCADA systems.

The requirement and benefits of off-the-shelf technologies and open standards makes the industrial automation and control systems (IACS) to move from isolated environment to interconnect with other networks. This makes the industrial control systems to expose for wide range of cyber attacks. As the severity of the cyber attacks on these networks are increasing, adopting crypto techniques and securing the industrial plant is a high priority issue from the past few years. The integration of crypto technologies in IACS is successful only by an effective key management infrastructure (KMI). From IACS perspective, this paper addresses the challenges and parameters that need to be considered while designing a KMI for IACS. Also, case study on KMI issues for supervisory control and data acquisition (SCADA) and WirelessHART is discussed. By considering the constraints and required key management features, an efficient key management scheme is proposed for SCADA and WirelessHART using polynomial key establishment scheme.

SCADA is widely used in critical infrastructures for monitoring and controlling the processes of industrial plants. The communications that occur in SCADA systems are transmission of sensed real time data across various devices, details of activities going on in the devices, information related to breaks and leakages in the system etc. As the numbers of deliberate cyber attacks on these systems are increasing, it is essential to achieve secure communication between the authorized devices. Use of symmetric crypto technique, which is suitable for real time and resource constrained devices, enables the authorized parties to share a common secret key. As these secret keys need to be preshared or updated for confidential communications; enforcing key synchronization in the communicating parties is a major issue. This paper proposes key synchronization mechanisms using self diagnosis approach. The self diagnosis approach using finite state machine enables each device in the system to participate in discovering the device which is not key synchronized, by transiting the detector's current state to a new one based on local evidences and arriving at accepted state outputs, resulting in the final diagnosis report. This report helps to look for the devices that have key synchronization problem and thus supports for secure and transparent communication in SCADA systems.