Internet Protocol Cameras with No Password Protection: An Empirical Investigation

摘要: Internet Protocol (IP) cameras have become virtually omnipresent for organizations, businesses, and personal users across the world, purposes of providing physical security, increasing safety, preventing crime. However, recent studies suggest that IP contain less than ideal security could be easily exploited by miscreants to infringe user privacy cause even bigger threats. In this study, we focus on without any password protection. We conduct a large-scale empirical investigation such based insecam.org, an online directory cameras, which claims largest one in world. To end, monitored site studied its dynamics with daily data collection over continuous period 18 days. compute number active new site, infer people’s usage habit cameras. addition, perform comprehensive characteristic analysis terms most used TCP/UDP ports, manufactures, installation location, ISPs, countries. Furthermore, explore other possibly existing issues those addition no utilize scanning tool discover hidden hosts services internal network where vulnerable camera is located, then vulnerability analysis. believe our findings can provide valuable knowledge threat landscape are exposed to.