IPTV Security Assessment?

[jorgan]

What about IPTV Security Assessment? Anyone familiar?

[imported_cookiemonster]

Good question, if it's any help we're proposing IPTV services and we query our client database and corellate with the number of subscribers known in the Radius for this given service to verify the legitimate use of our services. We disable multiple simoultaneous authentication with the same login/pass/macaddress and then finally display the illegitimate users. I know this is not a assessment but at least I replied .

[armedpilot]

Just noticed this book. http://www.wiley.com/WileyCDA/WileyT...47051924X.html but haven't bought it yet, so don't know if it's any good. I've been involved in a few IPTV assessments.

[imported_BaconZombie]

Most of the new kit uses a "Video_Bridge", the STB is connect to a port of the router which is VLAN off and connect to the Back-End Server via a ATM link.

[ShadowHatesYou]

In quotes because I haven't posted enough to do URLs:

cisco.com/warp/public/cc/so/neso/ns320/voip_wp.pdf

cablelabs.com/specifications/pc20.html

en.wikipedia.org/wiki/PacketCable

PS: Learn DOCSIS. Grab an uncapped cable modem and play with it, it's good to toy with. Noise around the water cooler is that a few major ISPs leave some CMTSs wide open goatse style under default configs *shiftyeyes*

PPS: HFC networks are a joke.

[.lonewolf]

Seems like an interesting topic.

http://www.foundstone.com/us/services-iptv-security.asp

IPTV is also subject to spamming, spoofing, content theft, and other hacking attacks, like many other IP-based solutions. Foundstone performs IPTV Security Assessments for many telecommunications companies to ensure that their IPTV are secured according to industry best practices.

I can only imagine how much these assessments could potentially cost... especially if certain loopholes are difficult or even impossible to locate.