5 Things You Should Know About Video Encryption

1. There are two types of data that require encryption

i.    Data in transit refers to information moving from the camera to the server or to the cloud, where it may be processed or stored.

ii.    Data at rest refers to surveillance data that is stored (not in motion), such as on servers, evidence lockers, or storage devices like hard drives.

The former is typically considered the greater security risk for CCTV systems, the fear being that hackers can more easily intercept surveillance data while it is ‘moving’. But often, data held is potentially deemed more valuable, with would-be hackers thinking it’s kept for a reason. Encryption measures should be employed in both cases.

2. Know what encryption strategies your system provider employs

Your surveillance solution provider should employ a mixture of encryption techniques to keep your data safe, so knowing what to look out for is useful.

Different encryption controls serve different purposes. Advanced Encryption Standard (AES) 256-bit (AES-256) is a common method for protecting stored surveillance data. For data transmitted between cameras, servers, and the cloud, HTTP encryption (HTTPS) and Transport Layer Security (TLS) are used. Make sure your provider is using TLS version 1.2 or higher. 

3. Encryption is not the same as ‘hashing’ 

Encryption and hashing are two different but important security techniques used in security and surveillance systems. Encryption involves encoding data so that only authorised people can read it, while hashing creates a unique digital fingerprint of the data. Both play important roles in securing surveillance systems and help reduce the risk of cyber-attacks.

Encryption is used to keep data confidential, ensuring that only authorised users can access the surveillance footage. Hashing is used to protect data integrity, meaning it helps prove that the data has not been changed. In practice, encryption controls who can view surveillance footage, while hashing helps show that exported video evidence is unchanged since capture.

4. It’s important to protect more than just surveillance footage

One often-overlooked area of security is system configuration. It’s all very well encrypting surveillance data at rest and in transit, but it's still vulnerable if someone knows how your system is configured. It’s like creating a pattern lock for a phone and then leaving a Post-it note reminder on the device.

Most surveillance systems offer manual configuration encryption, but the strongest approach is to select a security and surveillance system that encrypts system setup information by default and continuously monitors system activity for potential risks, such as password vulnerabilities or unauthorised configuration changes.

5. Encryption also does not prevent every form of data misuse

Once footage has been legitimately accessed, an authorised user can still export, photograph or screen-capture surveillance video.

This is where video watermarking provides an extra layer of accountability. Dynamic or forensic watermarking can embed identifiers such as usernames, system locations, or timestamps directly into displayed or exported footage, helping organisations trace the origin of leaked material and who had access at the relevant time. 

In addition to supporting investigations, watermarking can deter unauthorised sharing of sensitive surveillance footage.

Frequently Asked Questions

What are analytics?  

Analytics examine video footage to identify events, objects, behaviours, or patterns that need attention. They help security teams respond to incidents faster and reduce the need for manual monitoring.

What is encryption?  

Encryption secures data by changing it into an unreadable format. Only someone with the correct decryption key can access it. It should be used to protect surveillance data when stored, sent, or kept in system configuration files.

What is hashing?  

Hashing is a process that creates a unique digital fingerprint for data. If the data changes, the hash value changes. This method helps verify that surveillance evidence has not been altered.

What is metadata?  

Metadata is "data about data." In surveillance systems, it provides details about video or other data, such as object type, location, movement, time, or colour. This information makes it easier and faster to search through footage.

What are system configuration files?  

System configuration files store the settings that control how a surveillance system runs. This includes user permissions, network settings, device configurations, and security policies. Protecting these files is crucial because they manage system operations.

Why are these technologies important for surveillance systems?  

Analytics, encryption, hashing, metadata, and secure configuration files work together to help organisations improve cyber security, protect sensitive information, verify the integrity of digital evidence, and enable quicker and more efficient investigations.