Network Security Audit App (March Networks) Examined

Author: Brian Karas, Published on Dec 01, 2016

Verifying one's video surveillance devices are locked down against common cybersecurity vulnerabilities is increasing important, as hacks using video surveillance have become more prominent.

March Networks has released an enhanced mobile app to audit these issues.

Can you verify your recorder is locked down against common cybersecurity exploits?

In this note, we examine the app, and identify what it checks, and what it overlooks, when it comes to enhancing the network security of their products.

********* ***'* ***** ************ ******* *** ****** **** ******* ****** cybersecurity *************** ** ********** *********, ** ***** ***** ***** ************ have ****** **** *********.

***** ******** *** ******** ** ******** ****** *** ** ***** these ******.

*** *** ****** **** ******** ** ****** **** ******* ****** cybersecurity ********?

** **** ****, ** ******* *** ***, *** ******** **** ** checks, *** **** ** *********, **** ** ***** ** ********* the ******* ******** ** ***** ********.

[***************]

GURU *** ********

*****'* **** *** ** ******** ** ** * ******* ******* **** ****, ****** towards ********** *** *********** **** **** ***-*****. ***** *** *** documentation *** *************** **** **** *** ***, ****** * ******* ticket, ** *** ** ** ******* * ******* *** ** necessary. *** *** ***** ** ** ** *** **** *** as *** ********, ***** ** ******* **** ** ******** * wifi ****** **** *** ******** ** ****** * ***** **** hotspot *** *** ***** ******* *** *** ** ******* **.

* ********* ***** **** ***** ******** **** **** *** ******* app ********* *** *********:

Security ***** *************

***** ********* * ******** ***** ********** ** ****** ** ****, ***** ******** * ***** ****** check, ******* ** *** ******** **** **:

***** *** ***-******* ***** ********
***** *** ***-******* ****** ********** *****
***** **** *** **** ** ****** (*** ** ********* ******* temporarily *** ************ *** ********)
***** **** **** ** ********
***** *** *** **** **** ** *****

*** *** ******** ****/*******/*** ****** *** ******* **********, ********* ** what ** *****. ***** *** **** ****** * *** ****** to ***** ***,**** ** * ****** *** ** ** ***** *****.

Limitations ** ***** ***

*** **** ******** ***** **** *** ******* *** ****** ***** on *** ********, ** ****** ****** ** *** ******** ** report *** *************. *** ********* **** **** *** ******* ** detect ******* **** ***** ** ****** *** ******* ** ****** back ** *** ***. **** ***** **** * ******** ***** pass *** ***** ***** *****, *** ***** ** ******* **** form ** ****** ********, ** ******** ********* **** *** ** an ******** ******. ** ******, *** ******* ** * ******** being ****** ** *** *************** *** ******** *** ***** *****, it ** ********* ** **** **** * **** "****" **** the *** **** *** **** *** ****** ** ********** ****** ** attacks, *** ** **** ******** **** ** ** ** ***** not ** **** ******.

******* *** *** *** **** ** **** ** * ***** network, *********** *** *** *** **** ** ************ ***** ** on ********* *** ********* ** ****** **** ** ******* ******** settings **** **** ******* ** ****** ******** *****.

Good ***** ****

**** **** *** *********** ***** *****, **** ** ***** * good **** ** *****'* **** ** **** *********** ****** ******, and ******, ***** *********. ** ***** *** *** *** ******** to ******* **** ******, **** ** * ******** ********* ***** to ****** **** ** ***** ******** *** **** ********* ** the ********, *** ***** *** ********* ** ** **** **** will *********** **** ******** **** ****** ******** *** ************.

What ***** ***** ************* **?

**** ******** ************ *** ******** ** ***** ************. **** ********* enhancements ***** **** **** ***** *******:

**** ****-**** ** ******** ****** ***** *** ****** *** ***** for ***** **** ***** **** *** ** **** ***************
******-***** ********** ** ***** **** ****** ***** *** ****** *** also ******* ****** ********* *****
******** (*** ********** *******) ********** ******** **** **** *** **** used ** **/**/** ****

*** **** *********** ** *** ******** ***** *** ***** **** app ************.

Comments (2)

Michael Miller

12/01/16 06:16pm

** ***** ** **** ** **** * ********* **** ** scan ******** ** *** ** ******* ****/********* *** **** ** a ********* ** ****** *******. ********* *** ***** ***** ***** the ********* ****.

Undisclosed #1

12/01/16 07:33pm

...**** ******** ***** **** *** ******* *** ****** ***** ** the ********, ** ****** ****** ** *** ******** ** ****** its *************

** **** ** *** ***** ********* ****? *** ***.

** *** *********** *** **** *** ***** ** **** *** recorder's **** *** **, *** *** **** *** *** ***** you ** *** ***** **** *** ****** **** ** ***?

Login to read this IPVM report.

Why do I need to log in?

IPVM conducts unique testing and research funded by member's payments enabling us to offer the most independent, accurate and in-depth information.

Most Recent Industry Reports

Alexa Guard Expands Amazon's Security Offerings, Boosts ADT's Stock on Sep 21, 2018

Amazon is expanding their security offerings yet again, this time with Alexa Guard that delivers security audio analytics and a virtual "Fake...

UTC, Owner of Lenel, Acquires S2 on Sep 20, 2018

UTC now owns two of the biggest access control providers, one of integrator's most hated access control platforms, Lenel, and one of their...

BluePoint Aims To Bring Life-Safety Mind-Set To Police Pull Stations on Sep 20, 2018

Fire alarm pull stations are commonplace but police ones are not. A self-funded startup, BluePoint Alert Solutions is aiming to make police pull...

SIA Plays Dumb On OEMs And Hikua Ban on Sep 20, 2018

OEMs widely pretend to be 'manufacturers', deceiving their customers and putting them at risk for cybersecurity attacks and, soon, violation of US...

Axis Vs. Hikvision IR PTZ Shootout on Sep 20, 2018

Hikvision has their high-end dual-sensor DarkfighterX. Axis has their high-end concealed IR Q6125-LE. Which is better? We bought both and tested...

Avigilon Announces AI-Powered H5 Camera Development on Sep 19, 2018

Avigilon will be showcasing "next-generation AI" at next week's ASIS GSX. In an atypical move, the company is not actually releasing these...

Favorite Request-to-Exit (RTE) Manufacturers 2018 on Sep 19, 2018

Request To Exit devices like motion sensors and lock releasing push-buttons are a part of almost every access install, but who makes the equipment...

25% China Tariffs Finalized For 2019, 10% Start Now, Includes Select Video Surveillance on Sep 18, 2018

A surprise move: In July, when the most recent tariff round was first announced, the tariffs were only scheduled for 10%. However, now, the US...

Central Stations Face Off Against NFPA On Fire Monitoring on Sep 18, 2018

Central stations are facing off against the NFPA over what they call anti-competitive language in NFPA 72, the standard that covers fire alarms....

Hikvision USA Starts Layoffs on Sep 18, 2018

Hikvision USA has started layoffs, just weeks after the US government ban was passed into law. Inside this note, we examine: The important...