A Practical Guide to Securing SMPTE ST 2110 Systems and What Standards Organizations Are Doing to Help

Metadata

Publisher: SMPTE — White Plains, NY, USA
Doc Type: Journal Article
Content Type: Original Research
Abbreviated Title: SMPTE Mot. Imag. J
Volume: 130, No. 3, pp. 50–57
Abstract: Securing SMPTE ST 2110 systems is becoming an important issue since it adds new ways that your facility can be attacked. For example, an attacker could disable your SMPTE ST 2059/Precision Time Protocol (PTP) infrastructure, crippling your facility. Tackling security may seem like a daunting challenge. Many users and equipment vendors do not know where to start. To assist users and vendors, standards and related organizations such as SMPTE, the Joint Taskforce on Networked Media (JT-NM), the Advanced Media Workflow Association (AMWA), and the European Broadcasting Union (EBU) are working on specific parts of the security challenge. They are developing practical and actionable solutions. While these solutions do not address all aspects of security, they are a good starting point to get the industry moving in the right direction. This paper summarizes the ongoing work in different standards and related organizations and provide practical and actionable solutions for securing SMPTE ST 2110 systems. Because of its criticality, specific focus will be placed on the SMPTE ST 2059/PTP infrastructure.
Publication Date: 2021-04-01
DOI: 10.5594/JMI.2021.3061787
ISSN: Print: 1545-0279 | Electronic: 2160-2492
Link: https://doi.org/10.5594/JMI.2021.3061787
Author(s): Leigh Whitcomb
bio
Leigh Whitcomb is an architect for Imagine Communications, Toronto, ON, Canada, having joined the company in 1991. He participates in SMPTE, Alliance for IP Media Solutions (AIMS), Institute of Electrical and Electronics Engineers (IEEE), and Video Services Forum (VSF) standards committees, including serving as the co-chair of SMPTE 32NF Network/Facilities Architecture Technology Committee. He is actively involved in SMPTE ST 2110 Professional Media over Managed IP Networks and SMPTE ST 2059 Genlock Over IP. He became a SMPTE Fellow in 2017. His other professional affiliations include Professional Engineers Ontario. He holds a bachelor’s degree in computer engineering from the University of Waterloo, ON, Canada, and a master’s degree in electrical and computer engineering from the University of Toronto, ON, Canada. He is the co-inventor of several patents in the areas of networking and timing and synchronization.
Keyword(s): Advanced Media Workflow Association (AMWA), EBU, PTP, Joint Task Force On Networked Media (JT-NM), Security, SMPTE, ST 2059, ST 2110
Copyright: © 2021 SMPTE

Bibliographic Reference(s)

EBU.R143 — European Broadcasting Union (EBU), R143 “Cybersecurity for Media Vendor Systems, Software & Services,” Nov. 2020. Accessed: Feb. 2021. [Online]. Available: https://tech.ebu.ch/publications/r143 EXTERNAL
EBU.R148 — European Broadcasting Union (EBU), R148 “Minimum Security Tests for Networked Media Equipment,” April 2018. Accessed: Feb. 2021. [Online]. Available: https://tech.ebu.ch/publications/r148 EXTERNAL
EBU.R160 — European Broadcasting Union (EBU), R160 “Vulnerability Management Procedure Towards Media Equipment Vendors,” June 2019. Accessed: Feb. 2021. [Online]. Available: https://tech.ebu.ch/publications/r160 EXTERNAL
EBU.R161 — European Broadcasting Union (EBU), R161 “Responsible Vulnerability Disclosure Programme for Media Companies,” July 2019. Accessed: Feb. 2021. [Online]. Available: https://tech.ebu.ch/publications/r161 EXTERNAL
EBU.Tech3371 — European Broadcasting Union (EBU), TECH3371 “The Technology Pyramid for Media Nodes—Minimum User Requirements to Build and Manage an IP-Based Media Facility,” EXTERNAL
IEEE.STD1588.2008 — IEEE Std 1588-2008, IEEE Standard for a Precision Clock Synchronization Protocol for Networked Measurement and Control Systems, 2008 EXTERNAL
IEEE.STD1588.2019 — Institute of Electrical and Electronics Engineers (IEEE), IEEE 1588:2019, “IEEE Standard for a Precision Clock Synchronization Protocol for Networked Measurement and Control Systems.” EXTERNAL
Joint Task Force on Networked Media (JT-NM), TR 1001-1 “System Environment and Device Behaviors for SMPTE ST 2110 Media Nodes in Engineered Networks,” Nov. 2020. Accessed: Feb. 2021. [Online]. Available: https://static.jt-nm.org/documents/JT-NM_TR-1001-1_2020_v1.1.pdf EXTERNAL
Department of Homeland Security (DHS) Science and Technology Directorate, “Resilient Positioning, Navigation, and Timing (PNT) Conformance Framework,” Dec. 2020. Accessed: Feb. 2021. [Online]. Available: https://www.dhs.gov/sites/default/files/publications/2020_12_resilient_pnt_conformance_frame-work.pdf EXTERNAL
Advanced Media Workflow Association (AMWA), IS-05 “NMOS Device Connection Management Specification,” Accessed: Feb. 2021. [Online]. Available: https://specs.amwa.tv/is-05 EXTERNAL
Joint Task Force on Networked Media (JT-NM), “Cybersecurity Vulnerability Assessment,” Feb. 2020. Accessed: Feb. 2021. [Online]. Available: https://static.jt-nm.org/documents/security/jt-nm_cybersecurity_final_report_2020_02_26.pdf EXTERNAL
Advanced Media Workflow Association (AMWA), BCP-003-02: “Authorization in NMOS Systems,” Accessed: Feb. 2021. [Online]. Available: https://specs.amwa.tv/bcp-003-02 EXTERNAL
National Institute of Standards and Technology (NIST), “Cybersecurity Framework—The Five Functions,” Accessed: Feb. 2021. [Online]. Available: https://www.nist.gov/cyberframework/online-learning/five-functions EXTERNAL
Advanced Media Workflow Association (AMWA), BCP-003-03: “Certificate Provisioning in NMOS Systems,” Accessed: Feb. 2021. [Online]. Available: https://specs.amwa.tv/bcp-003-03 EXTERNAL
National Institute of Standards and Technology (NIST), “Framework for Improving Critical Infrastructure Cybersecurity,” April 2018. Accessed: Feb. 2021. [Online]. Available: https://nvl-pubs.nist.gov/nistpubs/CSWP/NIST.CSWP.04162018.pdf EXTERNAL
Advanced Media Workflow Association (AMWA), IS-04 “NMOS Discovery and Registration Specification,” Accessed: Feb. 2021. [Online]. Available: https://specs.amwa.tv/is-04 EXTERNAL
Advanced Media Workflow Association (AMWA), BCP-003-01: “Secure Communication in NMOS Systems,” Accessed: Feb. 2021. [Online]. Available: https://specs.amwa.tv/bcp-003-01 EXTERNAL
European Broadcasting Union (EBU), “Technology Pyramid for Media Nodes Media Node Maturity Checklist— Minimum User Requirements to Build and Manage an IP-Based Media Facility,” Sept 2020. Accessed: Feb. 2021. [Online]. Available: https://tech.ebu.ch/publications/technology-pyramid-media-node-maturity-checklist EXTERNAL
SMPTE, ER 1004:2021, “Report of the Study Group On Security in SMPTE ST 2059 - Threat Landscape.” EXTERNAL
SMPTE RP 2059-15 [Active]
SMPTE ST 2022-7 [Active]
SMPTE ST 2059-1:2020 [Active]
SMPTE ST 2059-2:2020 [Active]
SMPTE ST 2110-10:2017 [Superseded]
SMPTE ST 2110-20:2017 [Superseded]
SMPTE ST 2110-30:2017 [Superseded]
SMPTE ST 2110-40:2018 [Superseded]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/10.5594-JMI.2021.3061787.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

Leigh Whitcomb; A Practical Guide to Securing SMPTE ST 2110 Systems and What Standards Organizations Are Doing to Help, SMPTE Motion Imaging Journal ( Volume: 130, Issue: 3, April 2021); SMPTE, 2021. Available at https://doi.org/10.5594/JMI.2021.3061787

Snippet:

Leigh Whitcomb; A Practical Guide to Securing SMPTE ST 2110 Systems and What Standards Organizations Are Doing to Help, SMPTE Motion Imaging Journal ( Volume: 130, Issue: 3, April 2021); SMPTE, 2021. Available at https://doi.org/10.5594/JMI.2021.3061787

HTML (ISO 690 compliant)

Preview:

Snippet:

<span class="citation">Leigh Whitcomb; <cite>A Practical Guide to Securing SMPTE ST 2110 Systems and What Standards Organizations Are Doing to Help</cite>, SMPTE Motion Imaging Journal ( Volume: 130, Issue: 3, April 2021); SMPTE, 2021. Available at <a href="https://doi.org/10.5594/JMI.2021.3061787" target="_blank" rel="noopener">https://doi.org/10.5594/JMI.2021.3061787</a></span>

SMPTE's HTML Pub

Preview:

Leigh Whitcomb; A Practical Guide to Securing SMPTE ST 2110 Systems and What Standards Organizations Are Doing to Help, SMPTE Motion Imaging Journal ( Volume: 130, Issue: 3, April 2021); SMPTE, 2021
doi: 10.5594/JMI.2021.3061787
url: https://doi.org/10.5594/JMI.2021.3061787

Snippet:

<li>
Leigh Whitcomb; <cite id="bib-10-5594-jmi-2021-3061787">A Practical Guide to Securing SMPTE ST 2110 Systems and What Standards Organizations Are Doing to Help</cite>, SMPTE Motion Imaging Journal ( Volume: 130, Issue: 3, April 2021); SMPTE, 2021
<span class="doi">10.5594/JMI.2021.3061787</span>
</li>