1
00:00:00,000 --> 00:00:01,770
In this lesson, we're going to talk about

2
00:00:01,770 --> 00:00:04,890
how an attacker might bypass your surveillance systems.

3
00:00:04,890 --> 00:00:06,870
Now, surveillance systems are designed to monitor

4
00:00:06,870 --> 00:00:09,450
and secure an environment, whether that's a retail store,

5
00:00:09,450 --> 00:00:11,790
a secure facility, or even your home.

6
00:00:11,790 --> 00:00:13,890
These systems are crucial for ensuring the safety

7
00:00:13,890 --> 00:00:16,800
of your people and maintain the privacy of your data.

8
00:00:16,800 --> 00:00:18,840
However, just like any other technology,

9
00:00:18,840 --> 00:00:21,240
surveillance systems are not infallible,

10
00:00:21,240 --> 00:00:23,340
a determined intruder might attempt various techniques

11
00:00:23,340 --> 00:00:25,590
to bypass or disable your surveillance system

12
00:00:25,590 --> 00:00:27,600
in order to avoid being detected.

13
00:00:27,600 --> 00:00:29,760
So let's dive into some of the different methods used

14
00:00:29,760 --> 00:00:30,593
by attackers

15
00:00:30,593 --> 00:00:32,700
to bypass your organization surveillance systems,

16
00:00:32,700 --> 00:00:35,520
like visual obstruction, blinding sensors and cameras,

17
00:00:35,520 --> 00:00:36,900
interfering with acoustics,

18
00:00:36,900 --> 00:00:38,580
interfering with electromagnetics,

19
00:00:38,580 --> 00:00:40,770
and attacking the physical environment.

20
00:00:40,770 --> 00:00:42,810
First, we have visual obstruction.

21
00:00:42,810 --> 00:00:45,030
A visual obstruction is a simple yet effective way

22
00:00:45,030 --> 00:00:46,560
to bypass video surveillance

23
00:00:46,560 --> 00:00:48,540
by blocking the camera's line of sight.

24
00:00:48,540 --> 00:00:49,800
This is a simple technique

25
00:00:49,800 --> 00:00:51,180
and it usually involves spray painting

26
00:00:51,180 --> 00:00:52,890
or foaming over a camera lens,

27
00:00:52,890 --> 00:00:54,690
placing a sticker or tape over that lens,

28
00:00:54,690 --> 00:00:56,610
or positioning objects like balloons or umbrellas

29
00:00:56,610 --> 00:00:58,800
in front of the camera to block its view.

30
00:00:58,800 --> 00:01:01,560
Second, we have blinding sensors and cameras.

31
00:01:01,560 --> 00:01:03,840
Now, this method involves overwhelming the sensor

32
00:01:03,840 --> 00:01:05,970
or the camera with a sudden burst of light

33
00:01:05,970 --> 00:01:07,440
in order to render it ineffective

34
00:01:07,440 --> 00:01:09,120
for a limited period of time.

35
00:01:09,120 --> 00:01:11,400
Devices like high-powered flashlights or lasers

36
00:01:11,400 --> 00:01:13,920
can be aimed directly at the camera lens to temporarily

37
00:01:13,920 --> 00:01:15,390
or permanently disable it,

38
00:01:15,390 --> 00:01:17,700
while heating up a room could be another effective way

39
00:01:17,700 --> 00:01:21,060
to blind a sensor that relies on infrared radiation.

40
00:01:21,060 --> 00:01:23,490
Third, we have interfering with acoustics.

41
00:01:23,490 --> 00:01:25,710
Now, some sensors are specifically designed to listen

42
00:01:25,710 --> 00:01:27,450
to the environment in order to detect

43
00:01:27,450 --> 00:01:28,740
if somebody is in the area

44
00:01:28,740 --> 00:01:31,200
or to eavesdrop on their conversations.

45
00:01:31,200 --> 00:01:32,910
An attacker might play loud music

46
00:01:32,910 --> 00:01:34,920
or loud sounds to drown out conversations

47
00:01:34,920 --> 00:01:36,510
or other crucial audio cues

48
00:01:36,510 --> 00:01:38,520
to be able to bypass one of these acoustic

49
00:01:38,520 --> 00:01:40,230
or sound-based systems.

50
00:01:40,230 --> 00:01:42,690
This can also involve using specialized jamming devices

51
00:01:42,690 --> 00:01:43,590
to emit frequencies

52
00:01:43,590 --> 00:01:45,900
that are used to disrupt the microphone's functionality

53
00:01:45,900 --> 00:01:47,280
and employing white noise machines

54
00:01:47,280 --> 00:01:49,590
to mask sounds within an environment.

55
00:01:49,590 --> 00:01:52,350
Fourth, we have interfering with electromagnetics.

56
00:01:52,350 --> 00:01:54,570
Now, electromagnetic interference or EMI

57
00:01:54,570 --> 00:01:55,830
involves jamming the signals

58
00:01:55,830 --> 00:01:57,540
that surveillance systems rely on

59
00:01:57,540 --> 00:01:59,040
to monitor the environment.

60
00:01:59,040 --> 00:02:01,410
For example, if you're using a wireless surveillance setup,

61
00:02:01,410 --> 00:02:03,270
electromagnetic interference or jamming

62
00:02:03,270 --> 00:02:04,590
is really effective here

63
00:02:04,590 --> 00:02:06,780
and can take down your entire system.

64
00:02:06,780 --> 00:02:09,660
Some attackers will also use EMI generators or jammers

65
00:02:09,660 --> 00:02:10,949
to disrupt the radio frequencies.

66
00:02:10,949 --> 00:02:12,810
These systems are using to communicate

67
00:02:12,810 --> 00:02:15,960
or they can target a specific frequency that's being focused

68
00:02:15,960 --> 00:02:18,750
on for detection, such as the WiFi frequency band

69
00:02:18,750 --> 00:02:20,880
if the organization has a no wireless device

70
00:02:20,880 --> 00:02:22,650
inside the building type of policy,

71
00:02:22,650 --> 00:02:25,650
like some high-security and military environments do.

72
00:02:25,650 --> 00:02:28,380
Fifth, we have attacking the physical environment.

73
00:02:28,380 --> 00:02:29,730
The physical environment attacks

74
00:02:29,730 --> 00:02:30,960
are going to exploit the environment

75
00:02:30,960 --> 00:02:32,430
around the surveillance equipment

76
00:02:32,430 --> 00:02:34,410
to compromise their functionality.

77
00:02:34,410 --> 00:02:36,330
For example, an attacker could increase

78
00:02:36,330 --> 00:02:37,920
or decrease the temperature of the room

79
00:02:37,920 --> 00:02:39,600
to trick an infrared sensor.

80
00:02:39,600 --> 00:02:41,460
Or if the surveillance system isn't equipped

81
00:02:41,460 --> 00:02:42,480
with backup power,

82
00:02:42,480 --> 00:02:45,180
the attacker could target the system's main power supply

83
00:02:45,180 --> 00:02:46,860
to disable the entire system

84
00:02:46,860 --> 00:02:48,900
by physically unplugging the devices,

85
00:02:48,900 --> 00:02:50,160
tampering with power boxes

86
00:02:50,160 --> 00:02:52,410
or even sabotaging the local transformers

87
00:02:52,410 --> 00:02:54,540
that feed power into your building.

88
00:02:54,540 --> 00:02:55,680
For an even more drastic

89
00:02:55,680 --> 00:02:57,630
and dangerous physical environment attack,

90
00:02:57,630 --> 00:02:59,310
an attacker could actually start a fire,

91
00:02:59,310 --> 00:03:00,480
which will distract attention

92
00:03:00,480 --> 00:03:02,580
from the intruder's main objective of gaining access

93
00:03:02,580 --> 00:03:04,260
to the facility, but also,

94
00:03:04,260 --> 00:03:06,120
they could potentially damage surveillance equipment

95
00:03:06,120 --> 00:03:07,440
in the process.

96
00:03:07,440 --> 00:03:10,170
Note though, this approach will cause significant harm

97
00:03:10,170 --> 00:03:12,480
and it is fully illegal to conduct

98
00:03:12,480 --> 00:03:14,430
because it's classified as arson,

99
00:03:14,430 --> 00:03:16,020
but an attacker is already criminal

100
00:03:16,020 --> 00:03:17,730
and they may not care about that.

101
00:03:17,730 --> 00:03:19,200
Now, in addition to these methods,

102
00:03:19,200 --> 00:03:20,820
physical tampering, like cutting wires

103
00:03:20,820 --> 00:03:22,470
or physically disabling devices

104
00:03:22,470 --> 00:03:24,540
remains a crude but effective strategy.

105
00:03:24,540 --> 00:03:26,130
However, it does require the intruder

106
00:03:26,130 --> 00:03:28,680
to be close to the device, which can be risky.

107
00:03:28,680 --> 00:03:30,000
So you may be wondering,

108
00:03:30,000 --> 00:03:31,860
how can I stop these kinds of attacks

109
00:03:31,860 --> 00:03:33,660
against my surveillance systems?

110
00:03:33,660 --> 00:03:36,510
Well, all the methods I just talked about may make it sound

111
00:03:36,510 --> 00:03:38,640
like bypassing surveillance is really easy,

112
00:03:38,640 --> 00:03:40,710
but in modern systems, they're often equipped

113
00:03:40,710 --> 00:03:42,660
with countermeasures to help protect them.

114
00:03:42,660 --> 00:03:45,120
For example, some surveillance cameras come equipped

115
00:03:45,120 --> 00:03:47,430
with tamper alarms that will notify security personnel

116
00:03:47,430 --> 00:03:48,930
if somebody attempts to physically tamper

117
00:03:48,930 --> 00:03:50,130
with those cameras.

118
00:03:50,130 --> 00:03:51,780
Some surveillance systems are also equipped

119
00:03:51,780 --> 00:03:55,020
with backup power supplies or uninterruptible power supplies

120
00:03:55,020 --> 00:03:57,510
in order to counter power-based attacks.

121
00:03:57,510 --> 00:03:58,860
Other advanced surveillance setups,

122
00:03:58,860 --> 00:04:01,350
may also employ encrypted frequency hopping signals

123
00:04:01,350 --> 00:04:02,400
to guard against jamming

124
00:04:02,400 --> 00:04:05,400
and eavesdropping attacks that an attacker might try to do.

125
00:04:05,400 --> 00:04:07,770
So remember, understanding how surveillance systems

126
00:04:07,770 --> 00:04:10,710
can be bypassed is crucial for cybersecurity professionals.

127
00:04:10,710 --> 00:04:11,543
They're looking

128
00:04:11,543 --> 00:04:13,830
to protect their organizations' computing environments.

129
00:04:13,830 --> 00:04:16,320
While no surveillance system is entirely foolproof,

130
00:04:16,320 --> 00:04:18,060
being aware of potential vulnerabilities

131
00:04:18,060 --> 00:04:20,579
and continuously updating and refining your systems

132
00:04:20,579 --> 00:04:22,620
can really significantly reduce your risk

133
00:04:22,620 --> 00:04:24,360
and ensure a higher level of physical security

134
00:04:24,360 --> 00:04:25,593
for your organization.