Embed Size (px)
Citation preview
From IP Showcase Theatre at IBC 2018 September 2018
Curated by the Video Services Forum vsf.tv 1
C U R A T E D B Y
IP SHOWCASE THEATRE AT IBC – SEPT. 14-18, 2018
AMWA/EBUJoint Security Efforts
Willem Vermost – Network IP Media Technology Architect
EBU
WHY MOVE TO IP, WHY IS
IP THE ENABLER?
From IP Showcase Theatre at IBC 2018 September 2018
Curated by the Video Services Forum vsf.tv 2
Flexibility
ShareabilityScalability
SecurityReliability
Non-Functional Requirements For Live IP facilities
WHY SECURITY?From Script kiddies to organized Crime
From IP Showcase Theatre at IBC 2018 September 2018
Curated by the Video Services Forum vsf.tv 3
Well, I'll hazard I can do more damage on my laptop
sitting in my pajamas before my first cup of Earl Grey
than you can do in a year in the field.
Exaggerated or Reality ??
• Multiple reports of broadcasters being hacked.
• Content being altered or taken “off-air”
• Reputation damage
SECURITY AN ISSUE?
From IP Showcase Theatre at IBC 2018 September 2018
Curated by the Video Services Forum vsf.tv 4
On November 24, 2014, a hacker group which identified itself by the
name "Guardians of Peace" (GOP) leaked a release of confidential
data from the film studio Sony Pictures. The data included personal
information about Sony Pictures employees and their families, e-
mails between employees, information about executive salaries at
the company, copies of then-unreleased Sony films, and other
information.
SECURITY AN ISSUE?
CONTENThttps://en.wikipedia.org/wiki/Sony_Pictures_hack
On November 24, 2014, a hacker group which identified itself by the
name "Guardians of Peace" (GOP) leaked a release of confidential
data from the film studio Sony Pictures. The data included personal
information about Sony Pictures employees and their families, e-
mails between employees, information about executive salaries at
the company, copies of then-unreleased Sony films, and other
information.
SECURITY AN ISSUE?
CONTENThttps://en.wikipedia.org/wiki/Sony_Pictures_hack
From IP Showcase Theatre at IBC 2018 September 2018
Curated by the Video Services Forum vsf.tv 5
TV5MONDE had just launched its latest channel.
French ministers had been in attendance at the Paris headquarters.
http://www.bbc.com/news/technology-37590375
Yves Bigot : "A powerful cyber-attack came close to destroying a French TV
network, its director-general, has told the BBC".
http://www.bbc.com/news/technology-37590375
From IP Showcase Theatre at IBC 2018 September 2018
Curated by the Video Services Forum vsf.tv 6
It was a race against time - more systems were corrupted with every passing
minute. Any substantial delay would have led satellite distribution channels to
cancel their contracts, placing the entire company in jeopardy.
DESTRUCTIVE INTENT
Destructive intent
• Physical
• Dedicated network
• Specialized equipment
• Security through obscurity?
• Control applications already IP based!
SECURITY IN SDI WORLD
From IP Showcase Theatre at IBC 2018 September 2018
Curated by the Video Services Forum vsf.tv 7
• Archive
• Non-linear editing
• Playout facility
• Master Control Room
• News room
• Graphics systems
• …
SECURITY IN BROADCAST SYSTEMS
ALL IT Based
systems
• User with administrator access
• Default simple password
• Identical user for entire system
• Anti virus: please don’t!
• OS patching: please don’t!
• Old, unsafe protocols/versions
SECURITY IN BROADCAST SYSTEMSWHAT USERS GET TO HEAR WHEN THEY ASK ABOUT …
!
From IP Showcase Theatre at IBC 2018 September 2018
Curated by the Video Services Forum vsf.tv 8
• Keep your software up to date!
• Physical Security
• Active Directory (User management, Policies to Lock, Down machines …)
• Windows Server Update Services
• Anti-virus (Apply different profiles)
• Network (Layer 3, ACLs, Firewalls, …)
SECURITY – WHERE TO START?
• Cyber threats are:
✓ increasingly easier to perform,
✓ Evolving, morphing faster than ever
• Connected media devices perform low
on security
SECURITY - EBU R 148
From IP Showcase Theatre at IBC 2018 September 2018
Curated by the Video Services Forum vsf.tv 9
• Watch the EBU publications @ tech.ebu.ch/publications
• Strategic document: EBU R148
• Tactical document: to be published
• Practical documents: to be published
SECURITY - PUBLICATIONS
C U R A T E D B Y
IP SHOWCASE THEATRE AT IBC – SEPT. 14-18, 2018
Thank YouWillem Vermost, EBU
[email protected] / +41 79 376 78 59
![EBU-TT (EBU Tech 3350) · Version 1.2 of EBU Tech 3350 (EBU-TT Part 1) ... Tech 3370 [4] and Tech 3390 (Part M) [5]. ... 2009 Chapter 4](https://img.dokumen.tips/doc/110x75/5b010cb27f8b9a54578d9d53/ebu-tt-ebu-tech-3350-12-of-ebu-tech-3350-ebu-tt-part-1-tech-3370-4-and.jpg)
