Cisco: Hikvision Hired Us

Author: John Honovich, Published on May 16, 2017

The day after Hikvision's backdoor was confirmed by the US Department of Homeland Security, Hikvision issued a press release about a 'cybersecurity collaboration' with Cisco inside China, with Hikvision USA touting that Hikvision was 'adding cybersecurity credentials.'

The release was atypical for Cisco, which normally includes their own contact person and quote. The Hikvision release had neither, just statements from Hikvision.

In this note, we share a statement from Cisco about Hikvision and examine the potential impact of this move.

*** *** **************'* ******** *** *********** *** ** ********** ** ******** ********, ********* ****** ****** ******* ***** * '************* *************'**** ***** ****** *****, **** ********* *** ******* **** ********* was '****** ************* ***********.'

*** ******* *** ******** *** *****, ***** ******** ******** ***** own ******* ****** *** *****. *** ********* ******* *** *******, just ********** **** *********.

** **** ****, ** ***** * ********* **** ***** ***** Hikvision *** ******* *** ********* ****** ** **** ****.

[***************]

Cisco *********

*****'* ******** ****** ********* **** ********* ** ****, ****** ***** that ********* *** * ******** ** ******:

*****’* ****** ******* ***********, ********* ********** *** ****** ***** ******** practices *** *** ********-******* ******** ** *** ********** ** ********. As ****, ***** ***** ***** **** **** ****** ********* ** help ****** *** ******** ************* ** ********* *** ******** ** their *** ********. *** *** ******** ** *** ************ *** support ** *** *********, *** ** *** ********** ********* ** provide *** ******* ***** ******** ********. **** ****, ** ** not ******** ******** ************ ******** ******* ***********, *** **** ** direct *** ** ********* *** ******* ***********.

*********

***** *****'* ******* ***** *** ****** ** *** ** *******'* largest ********** *********, ********* ****** ***** ** * ****** ****** relations **** *** ***** **** *****. ***** ***** *** **** unsuccessful ****** ***** ************, ***** ** ******* *** ** *** most ****-***** ********** ********* ********* ** *********** ********** **** ***** helps ** ******* *** ****** ** *********'* ********** **** *** backdoor.

Engineering *******

****** *** ****** ********* *******, ********* ** **** *********** ** help ***** ********, **** ***** ******* *********'* ******** *********** *******, assuming *** ******** *** ** *********** *****, ****** **** ************* placed. *******,*********'* ***** ********* ** ***** (*******, ******, *************, ***.) **** ** ********** to ****** *** **** **** *********** ************ *** ***** ****.

Second ******* / **** ******

**** ** *** *** ***** **** ********* *** ***** ******* help *** *************. ** ****, ************* **************** ********** ******** ***************** ********* ********. ********* *********'* ***** ***** ************* ****** ** 2015,********* ***** ******** "** ******* * *********** **** *** ************* ********** ** [their] ********."

******'* ******** ** ********* ******** *****. ** ******** ** *** being ****** ***** ******* ** *** ************* *******, ********* ****** did *** ******** *** ******** **** *** *** ***** *** more **** ** ****** ***** ********* **** ****** *** ********* their ******** (******* ****** ****** ** ** ********* ********** ***** efforts ** *******).

Hikvision / ***** ******

********* ****** ***** ** * ***** ****, ****** ******* ** as * '*************' ***/** ** *********** **** ***** ** *********, since ********* ***** *****. *** **** **** ******* **** ********* can **** *** ***** ***** ** * ********* ** ***** poor ************* ***** ****** *** *** ******* ** *** *********** side ** **** *********** ******** **** *****.

Comments (34)

********* ***** ******* * ***** **** ******, **** * ***** and ****** ***** ***** ** ** ** ****** ** *** be ******** ** **** ****** ** **** *** **** *** to ***** ****** ********** ** *******, *** ** ***** ***** be ********* ** ** ******** *******, ** ********.

***** -

** *** ***** **** **** ** ***, ***, ** *** parties "*******" *** ******** ** ********* *******, **** **** ***** press ******** ***** ************ *** ***********. *********, *********** ********* *** finding ******** ** ********* ********/********/***** ************, ***** ** ***** ***** time ** **** *** ** ******* *********.

*** *** **** * ****** *** ** ****, ********, ** unobtanium, *** ** ** ** ******** ******-*********** ******* ***************, ****** are ***** ** ********** **** ** *** ** ***** * security ****.

** *** ***** **** **** ** ***, ***, ** *** parties "*******" *** ******** ** ********* *******

*'* **** ***** ** ******* ****** ***** *** ** ******* to **** * ***** *******.

********* ***** ******* * ***** **** ****** ...*** ** ***** still ** ********* ** ** ******** *******.

****'* *** ** ****** ** *** ***.

****, ***** **** *** ****** **** *** ****.

********* ** ** ******** *******

**** ** **** **** *** '*********'?

*****, **** ** '**********'. ***** *** * ******** ***** *****'* role ** *** ********* '*************'. ** ******** **** *****, ******** a ****** ***** ** *** ******, ****** ** ***, ** boot, **** **** ***** **** ******** ** ** ** *********.

* ********** **** ******* ******** ** **** ******** ** ********* is ** ******** *** ***'* *** ***** ***'* ** ****** saving **** ******** *** * **** ********* ******?

*****,

*'* *******, *** **** ***** *** ********* **** *** ****** to ** **** ** *** ********* ** ********* *** ******* you've **** ** ****** ******** *** *** *** ***** *** are ** ****** ********* ** *** *******? ** **** *** not **** **** ***?

**** ** ** ****** ******. ***** ******* *** ******** *******. Some *** *********, ***** ***** ****** ******, *** *** *********** have ** ****** ********. **'* **** ** *** ***.

***,

* ******'* ***** **** *** **** **** ********* ******** ** part ** *** ***. *** ********** ** *** ******* *** you **** ** ******* ********. ** *** **** ******** ** cases, ******** ******** ** ********* *** *** ******* ********, ****** or **** *********.

** **** ******** **** *** ******** ************ *'* ********* **, your ********* ********* ***** **** **** ******* ** ***** *****, voyeurism ***\** ********** ******* *** ******** *******. (**** *** ******** to ** *** **** **** ******* ** * **** **** a ********* ****** **** * **** **** ************* *** **** fired *** ********** *** ********* *** ********* **, *** ** get ****** ********, *** **** *********** **** ***** *******)

***** *** ********** ******* **** *** ********* ******** ** *** a ***** *** ** ******. * ***** "****** ******" ***** be ********** ** **** *******, *** ****.

* ***** ** **** ** ****** ******* ****** ** ******** these *****. ** *** **** * ********* ****** *******, ************ to ** **** *** ********, ***** ***** ** ***** ****'* as ********. * ***** ******* ** ******** *********** *****, *** it ***'* ** ****** ** ** **** **** ******* ** an ******** ****** *******.

************* **** ** ******* **** **********. **** ** **** ****** you ***'* **** **** ******* ******* ***'** ***** ** ***** safely.

**** *** ********* ** ***, *** ******** ******** *******, ** not ******, *** **********.

****** ***'** ********** *** ** **** ********* ** *** *** their *******.

*** ******* ** ** ******* ******* *** *** ** ** internet ********** *******. **** **** ******* ** *** *** ****** thru * ****** ***. *** **** ****** **** ** ****** face ** *** *** ******. *** ******* *** ************. *** Hikvision ******** *** ****** ****** *** *** ******. **** ** simple. **'* *****. **'* *********.

****** *** ******** ******* *******...

**** *** ******** *** ****** **** ***** ****. *** *** connected ** *** ******** ******* **** **** ********* ** ** accessible ******* ****. **** ** *** *** *** ****** *** and ******** *** ******** *** ******** ****** *** ****** *** cameras.

*** ** *** ****** "******** ******" **** *******?

****'* *** **** * ****.

*** **** * **** *** ********** ******.

"Even ** *** *** *** ****** *** *** ******** *** ******** *** ******** ****** *** ****** *** *******."

**** ****** ******* **** *****

* ** *******

**** ***, "******* ****"

****://***.*********.***//**********/*****/**************************************.***

***

****, ** **** ****

*** **** ** *** ****** **** ********

*** **** ** *** ****** **** ********

***** ***** **** ** ****** **** ** *** ******** ** the ******** ****.

***** ** ******** ** ******* *** ***** **** ** ** deliberately *******. *** ******** ***** **** ** **** **** ** was ****** ******* *** *** ******, ***-******** ****** ***** ******** mapped ** * ********** ******. *** ****** *** ******** ** straws.

*** ** * ******** ** ******?

**** ** * ******* ********** ******* *** * ******** ** allow ****** ****** ** *** *******. ** *** ***** **'* a ******** **** **** ****'* ******* *** ****** **** *** click ** * *****?

**********, *** ***'* **** ****** ** *** ********* ********* ****** network ** ** ******. *** ******* **** ******** **** ******** NICs, * ********* ** *** **** ******** *** *** ********* which *** *** ********** *********.

*****, * ***** *** *** ********* ****** *** *******. *** "quality" ** ******** ******** ** **** *** "***********" *** ***** on **** ****. *** ******** ********** ** ********* ** **** as **** ** *** ***** ******* ********* *** **** **********. The ********* ** ********* ** **** **********. *** ********* ******** practices ** ******* ********* *** *** **** ** **** ******** are **** **********. **, ***** ***** *** **********. ****** *** entitled ** ***** "********."

**** ******* ** *** ******** **** ***** **** ***** ** to **** **** ******** *****.

**** ** ******* ** **** ** ***/***. ********, * *** headline.

********** **** *** **** ***** ***** ***** *********...

**** ****, **** ******'* ******** ** * *** **** *** Hikvision, ****** *** ***** *****'* ********* *** ****. ** **** definitely ***'* ** ***** ** ****, **** ****** ****.

** *** ** ********* ********* ** ***** ** * ******* is ***** *****. **** ***** **** ********* *** ********* ***** with ******** ********. *** **** **** **'* ****** **** **** they *** ****** *****'* ****** *** **** **** **** *** getting **** **** * ***** ****** ** ** ********.

** *** **** ** *** *** ***********, *** **** ***** you ******** **? ******* ** * "*******" **** *****, ******* they **** **** **** ****** *** ***** *********. ***** *** many "************" ****** *** ******** **** *** ********/***** ** *** side *** **** ** *** *****.

**** **** **** **** *** ******** ******** ************ **** * heard **** * ****** ******. ***********!

** *** **** ** *** *** ***********, *** **** ***** you ******** **?

******* ******** / ******.

*** ***** **** *****, *** *** ********* **** *** ***** clinic? **.

*** **** * ******* ********, *** *** ********* **** *** attorney? **.

*** ** ** *** ****** ** ****** * *****, *** you ******** **** *** ******? **.

********* ***** ****. **** ******* **** *** **** **** **** Rapid7, ******* **** ***** ************* ** ******** **** ******** ******* and **** ***** *** **** ********. ***, **** *** ******** to *** **** **** *****.

*****, **'* * **** ** ****. **'* *** * *********** and *****'* ***** ** ******** ** **** **** ** ** going ** **** * **********.

****, ************, **** ** ***** ******** *** *** ********. * expected ****.

** *** ** ******, ********* **** ****** *** ****. *** not ***** ** *** **** ** *** ** *** ****.

* ******* ***** ******* ************** ******, *** **** ********* **** *** ******? **.

** ******** ** ******, ** ** *** ***** **** ********* had ****** **. ***** ********* **** **** ** ** ********** assessments, ******* *** **** ******** *** ****** ****** **. ***** Hikvision **** *** **** ** *** *********** ****** *** ********. Rapid7 ** *** ******* ** ***. ********* ***** ***.

* ***'* ***** ***** *** *********** ** ********** * ***********. While *** ********* ********** ** *********** ***** ******** ** ******* here, *********** ******* * **** ** ****** ***** ****** * simple *********** **** ******** ******** ***.

********* ****** ** **** ************* ** ********** ******** **** *****, thanks ** *****'* *****. ***** *** (******) ******* ** **** by **** *********** ***** ******** ** *********. ** ****, ** HikVision **** *** *********** ************* ******* ** *** ********* ** the ****** ***** ***** *** ******** ***** ********, ** ***** be ********** * ******* ** *****.

**** ***** ****, * ***'* *** *** **** "*******" ** this **** ** *********'* **** ** ******** *******. ***** *'* not ******* **** ******, *** *** * *** ** *** term "*************".

***·***·*·**·****
*əˌ***əˈ*ā**(ə)*/
****
****:*************; ****** ****:**************
  1. *.
    *** ****** ** ******* **** ******* ** ******* ** ****** something.

*** ****** ** **** ************* **** ********* ** *** ********** of **** ****** ********. *** ********** ** ************* *** ** stretched ** *** ****, *** **'* ***** ********* ***** *** "Cisco *** * *** **** ********** **** ********, ** ** hired **** ** **** ** **** *** ******** **** ******".

*** ** **** *****'* ****** *** **** **** ** ** a **** ******** **** ** *********, *** ********* ** *** depth ** *** *************, ***** ** ** *********** ** ******* up ***** ******** *** ***** **** **** **** *** ****-*****-********* stigma.

** *** ***** *** "*** ******" ******* ** ***** ** partner **** ******* "*** ******" ******* ** * ************, **** you ******* ** *** **** ** ************* ** *** ********** works.

**** ******* **** ***** *****, ****** **** **** *** ** a *******. * *** **** *********, *** **** ****** ** a "*******" **** **** ******. *** *** **** ***** ***.

** *** ****, * ***** **** ***. **** ** * great **** *** ********* *** ****** ******** ** **** ***** lead ****** *** ******* **********.

* **** **** ** **** ****'** ****** ** *** **** lettuce ** * **** ******** ** **** *** **** ** health ****.

*** ** *** ****** ****? ;-)

* **** **** ***** **** ****** ** ********.

** ******* ****'* ***** **** *** ***********, *'* ******** *********** for *** **** ***** ****** **** **** *****, **** ******* to ** *********** ******. *** “***********” ******* *** **** **** mocks *** **** ** *** **** ***********, ************ *** *** users ****'** ********* ** - **'* *********.

****** **** ******** **** ********** ********** ** *******, ******* ****** and ******** ******* ******/*******, **** ** ***** **** ***** ***** energy?

** **** ** **** ******* ****, **'* * ****** ******* in **** *******. **** ***'* ********* *****, **** ***'* ******* the ********* *** **'* ******* **** ******.

******, ***** *** ******* ********* ******* *'* ********* ****'** ****** the **** **** *****. ** *** ****** ** **** ***** day *** **'* ** ************* ****** ** *****.

***********. ** *** *** ** *** *** (**** ****** **) the ********* ***** ************ *** * **** ********* / ********* marketing **** **** **** ******* & ***** ** **** ******** repercussion. *** **** ******* ******** ***** ** ****** ******* ******** flaw ***** *** * **** ** *** ***** **********. (***** then *****.)

**** **** *********....****'* ****?

***, ** ***'* *&* **** ** ** ****** ** **** advertise, *** ** **** **** ***** *****? ** ****, **** have ********* ** ** **** ***** "*********** *****"

********* *********** *** ******* ** **********.

**** ** ********** *** ***** ***** *****'* ******** ** **** in *****.

Login to read this IPVM report.
Why do I need to log in?
IPVM conducts unique testing and research funded by member's payments enabling us to offer the most independent, accurate and in-depth information.

Related Reports

China: Foreign Video Surveillance Is Security Risk on May 25, 2018
The Chinese government has long acknowledged that foreign video surveillance is a 'risk to national security' and has increasingly and almost...
US House Passes Bill Banning Gov Use of Dahua and Hikvision on May 24, 2018
Today, the US House of Representatives passed H.R. 5515, a bill that includes a ban on the US government's use of Dahua and Hikvision. This follows...
The Hikvision Smart Classroom Behavior Management System on May 22, 2018
Hikvision's rapidly growing offering of analytics, which we most recently examined with Hikvision's ethnic minority analytics, is now going into...
Cybersecurity for IP Video Surveillance Guide on May 18, 2018
Keeping surveillance networks secure can be a daunting task, but there are several methods that can greatly reduce risk, especially when used in...
Hikvision Source Code Transparency Center Examined on May 14, 2018
Following criticism of Hikvision's Chinese government ownership and Hikvision's IP camera backdoor, the company has responded with a series of...
Hikvision's Minority Analytics on May 08, 2018
Hikvision has developed and is deploying minority analytics inside China, automatically identifying and categorizing individuals as ethnic...
Genetec Wins Panama Canal With Direct Low-Bid on Apr 30, 2018
Genetec and low price are not two terms frequently found together. However, in a surprising and controversial move, Genetec has won a Panama Canal...
Massive China Xinjiang Security Project Spending At Risk on Apr 30, 2018
A Chinese government review of state-sponsored projects in Xinjiang Province could harm the bottom line of large Chinese security manufacturers,...
Death Of A Dummy Camera Manufacturer on Apr 25, 2018
5 years ago, IPVM gathered insights from a dummy camera manufacturer, who was then the top selling dummy camera provider on Amazon and 3rd in all...
Hikvision Critical Cloud Vulnerability Disclosed on Apr 25, 2018
Security researchers Vangelis Stykas and George Lavdanis discovered a vulnerability in Hikvision's HikConnect cloud service that: just by...

Most Recent Industry Reports

VMS Server Sizing on May 25, 2018
Specifying the right sized PC/server for VMS software is one of the most important yet difficult decisions in IP video surveillance. In the past...
China: Foreign Video Surveillance Is Security Risk on May 25, 2018
The Chinese government has long acknowledged that foreign video surveillance is a 'risk to national security' and has increasingly and almost...
US House Passes Bill Banning Gov Use of Dahua and Hikvision on May 24, 2018
Today, the US House of Representatives passed H.R. 5515, a bill that includes a ban on the US government's use of Dahua and Hikvision. This follows...
Hanwha Wisenet X Analytics and VMD Test on May 24, 2018
Continuing our updated testing of camera analytics, we tested Hanwha's Wisenet X analytics for over two weeks in multiple scenes, indoors and out,...
Ambitious Mobile Access Startup: Openpath on May 24, 2018
This team sold their last startup for hundreds of millions of dollars, now they have started Openpath to become a rare access control small...
Amazon's "Dangerous New Face Recognition Technology" Says ACLU on May 23, 2018
The ACLU has caused a stir, with a new report Amazon Teams Up With Law Enforcement to Deploy Dangerous New Face Recognition Technology,...
Software Only VMS vs NVR Appliances on May 23, 2018
Should you buy your own PC/server and load VMS software on it or get a turnkey appliance (both hardware and software, e.g., NVR, Hybrid DVR) from a...
Buy Arecont: Top Bid $10 Million Cash on May 22, 2018
Last year, Arecont had a deal for a purchase price of $170 million (see Failed Arecont China Acquisition). This year, Arecont has a deal for a...
Installing Box Cameras Indoors Tutorial on May 22, 2018
This tutorial starts our physical installation for video surveillance series, starting with Box Cameras, one of the oldest and most basic types....
The Hikvision Smart Classroom Behavior Management System on May 22, 2018
Hikvision's rapidly growing offering of analytics, which we most recently examined with Hikvision's ethnic minority analytics, is now going into...

The world's leading video surveillance information source, IPVM provides the best reporting, testing and training for 10,000+ members globally. Dedicated to independent and objective information, we uniquely refuse any and all advertisements, sponsorship and consulting from manufacturers.

About | FAQ | Contact