Designing Secure ST 2110 Systems

Metadata

Publisher: SMPTE
Doc Type: Journal Article
Content Type: Original Research
Abbreviated Title: SMPTE Motion Imaging Jour.
Volume: 135, No. 1, pp. 10–26
Abstract: The broadcast industry's transition from Serial Digital Interface (SDI) to SMPTE ST 2110 IP infrastructure offers flexibility but introduces significant security threats. This paper addresses these challenges by proposing comprehensive best practice guidelines tailored to ST 2110 environments, leveraging the European Broadcasting Unio (EBU) Technology Pyramid for Media Nodes. We identify unique vulnerabilities, including the critical dependency on Precision Time Protocol (PTP) and the lack of native stream authentication. To mitigate these risks, the proposed framework integrates multilayered controls: robust network segmentation, secure Advanced Media Workflow Association (AMWA) Networked Media Open Specifications (NMOS) protocols, continuous monitoring, and device hardening. Furthermore, we explore the application of Zero Trust Architecture (ZTA) to reduce the attack surface in distributed workflows. This paper provides broadcast engineers with actionable technical guidance to evolve from traditional perimeter models to a modern Zero Trust approach, ensuring the benefits of IP media production are realized without compromising operational integrity.
Publication Date: 2026-01-01
DOI: 10.5594/JMI.2026/YOXS1352
ISSN: Print: 1545-0279 | Electronic: 2160-2492
Link: https://doi.org/10.5594/JMI.2026/YOXS1352
Author(s): Endrit Vorfaj
Carmela Troncoso
Keyword(s): ST 2110, IP Media, Broadcast Security, Cybersecurity, Zero Trust Architecture, EBU Tech 3371
Copyright: © 2026 SMPTE

Bibliographic Reference(s)

SMPTE, “ST 2110–10: Professional Media over Managed IP Networks-System Timing and Definitions,” Mar. 2022. [Online]. Available: https://pub.smpte.org/pub/st2110-10/st2110-10-2022.pdf. EXTERNAL
SMPTE, “ST 2110–10: Professional Media Over Managed IP Networks-Uncom-pressed Active Video,” Dec. 2022. [Online]. Available: https://pub.smpte.org/pub/st2110-20/st2110-20-2022.pdf. EXTERNAL
SMPTE, “ST 2110–30: Professional Media Over Managed IP Networks-PCM Digital Audio,” Nov. 2017. [Online]. Available: https://pub.smpte.org/pub/st2110-30/st2110-30-2017.pdf. EXTERNAL
SMPTE, “ST 2110–40: Professional Media Over Managed IP Networks-Ancillary Data,” Jun. 2023. [Online]. Available: https://pub.smpte.org/pub/st2110-40/st2110-40-2023.pdf. EXTERNAL
SMPTE, “SMPTE 259M: Serial Digital Interface,” 2008. [Online]. Available: https://ieeexplore.ieee.org/document/7291225. EXTERNAL
T. Orme, “Video Transport: SDI vs IP-Timing Is Everything,” The Broadcast Bridge, Jun. 2016. [Online]. Available: https://www.thebroadcastbridge.com/content/entry/6066/video-transport-sdi-vs-ip-timing-is-everything. EXTERNAL
RGB Communications, “Understanding AV over IP: What It Is & Why It Matters,” RGB Communications News, Mar. 2025. [Online]. Available: https://www.rgbcomms.co.uk/news/2025/April/understanding-av-over-ip-what-it-is-and-why-it-matters. EXTERNAL
J. S. Gansler and W. Lucyshyn, “Commercial-Off-The-Shelf (COTS): Doing It Right,” Sep. 2008. [Online]. Available: https://apps.dtic.mil/sti/tr/pdf/ADA494143.pdf. EXTERNAL
SMPTE, “st2022–6-2012,” 2012. Accessed: Sep. 27, 2025. [Online]. Available: https://pub.smpte.org/pub/st2022-6/st2022-6-2012.pdf. EXTERNAL
SMPTE, “ST 2059–2:2021-SMPTE Profile for Use of IEEE-1588 Precision Time Protocol in Professional Broadcast Applications,” 2021. EXTERNAL
“What Is SMPTE 2110? NMOS Standards.” [Online]. Available: https://netinsight.net/blog/what-is-smpte-2110-and-nmos-all-about/. EXTERNAL
W. Alghamdi and M. Schukat, “Advanced methodologies to deter internal attacks in PTP time synchronization networks,” Proc. 207728th Irish Signals and Systems Conference (ISSC), pp. 1–7, 2017. EXTERNAL
Embrionix, “Transparent Boundary Clock ST 2059 in Broadcast,” 2021. [Online]. Available: https://www.embrionix.com/en/resource/transparent_boundary_cIock_ST2059_in_broadcast. EXTERNAL
H. Weibel and D. Beguelin, “Implementation and Performance of Time Stamping Techniques,” IEEE Communications Magazine, 54 (10): 121–129, 2016. EXTERNAL
B. Gilmer and P. Brightwell, AMWA NMOS: The Whole Story, IP Showcase Theater, NAB 2019, AIMS Alliance/AMWA, 2019. EXTERNAL
Advanced Media Workflow Association (AMWA), “NMOS IS-04: Discovery and Registration Specification,” 2025. [Online]. Available: https://specs.amwa.tv/is-04/. EXTERNAL
Advanced Media Workflow Association (AMWA), “IS-OS: NMOS Connection Management,” 2025. [Online]. Available: https://specs.amwa.tv/is-05/. EXTERNAL
L. Conklin, “Threat Modeling Process.” [Online]. Available: https://owasp.org/www-community/Threat_Modeling_Process. EXTERNAL
W. Edgar and D. O. Manz, “Addressing the Adversary,” Research Methods for Cyber Security, pp. 345–366, 2017, doi: 10.1016/B978-0-12-805349-2.00014-5. EXTERNAL
J. Nadeau, “83% of organizations reported insider attacks in 2024,” Nov. 2024. [Online]. Available: https://www.ibm.com/think/insights/83-percent-organizations-reported-insider-threats-2024. EXTERNAL
I. Corp, “Intel Precision Time Protocol Servo (Intel” PTP Servo) Solution for Time Synchronization Applications Executive Summary.” Accessed: Sep. 28, 2025. [Online]. Available: https://cdrdv2-public.intel.com/784715/ptp-servo-solution-for-time-synchronization-applications-white-paper.pdf. EXTERNAL
“BIND 9.” [Online]. Available: https://www.isc.org/bind/. EXTERNAL
Advanced Media Workflow Association (AMWA), “BCP-003–01: Secure Communication in NMOS Systems,” 2025. [Online]. Available: https://specs.amwa.tv/bcp-003-0l/. EXTERNAL
S. P. S. Europe, “nmos-cpp: AMWA NMOS APIs C++ Implementation,” 2025. [Online]. Available: https://github.com/sony/nmos-cpp. EXTERNAL
Red Hat Inc., “Keycloak: Open Source Identity and Access Management,” 2025. [Online]. Available: https://www.keycloak.org/. EXTERNAL
European Broadcasting Union (EBU), “Tech 3371 The Technology Pyramid For Media Nodes Minimum User Requirements To Build And Manage An Ip-Based Media Facility Using Open Standards & Specifications,” Apr. 2023. EXTERNAL
Advanced Media Workflow Association, “AMWA IS-10: NMOS Authorization Spec-ification,” 2022. [Online]. Available: https://specs.amwa.tv/is-10/releases/v1.0.1/docs/Overview.html. EXTERNAL
S. Rose, O. Borchert, S. Mitchell, and S. Connelly, “Zero Trust Architecture,” Aug. 2020. doi: 10.6028/NIST.SP.800-207. EXTERNAL
“Inter-Entity Trust Boundary,” Aug. 2023. [Online]. Available: https://pub.smpte.org/pub/rp2129/rp2129-2023.pdf. EXTERNAL

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/10.5594-JMI.2026-YOXS1352.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

Endrit Vorfaj and Carmela Troncoso; Designing Secure ST 2110 Systems, MIJ 2026, Volume 135, Number 1 (pp. 10 to 26); SMPTE, 2026. Available at https://doi.org/10.5594/JMI.2026/YOXS1352

Snippet:

Endrit Vorfaj and Carmela Troncoso; Designing Secure ST 2110 Systems, MIJ 2026, Volume 135, Number 1 (pp. 10 to 26); SMPTE, 2026. Available at https://doi.org/10.5594/JMI.2026/YOXS1352

HTML (ISO 690 compliant)

Preview:

Endrit Vorfaj and Carmela Troncoso; Designing Secure ST 2110 Systems, MIJ 2026, Volume 135, Number 1 (pp. 10 to 26); SMPTE, 2026. Available at https://doi.org/10.5594/JMI.2026/YOXS1352

Snippet:

<span class="citation">Endrit Vorfaj and Carmela Troncoso; <cite>Designing Secure ST 2110 Systems</cite>, MIJ 2026, Volume 135, Number 1 (pp. 10 to 26); SMPTE, 2026. Available at <a href="https://doi.org/10.5594/JMI.2026/YOXS1352" target="_blank" rel="noopener">https://doi.org/10.5594/JMI.2026/YOXS1352</a></span>

SMPTE's HTML Pub

Preview:

Endrit Vorfaj and Carmela Troncoso; Designing Secure ST 2110 Systems, MIJ 2026, Volume 135, Number 1 (pp. 10 to 26); SMPTE, 2026
doi: 10.5594/JMI.2026/YOXS1352
url: https://doi.org/10.5594/JMI.2026/YOXS1352

Snippet:

<li>
Endrit Vorfaj and Carmela Troncoso; <cite id="bib-10-5594-jmi-2026-yoxs1352">Designing Secure ST 2110 Systems</cite>, MIJ 2026, Volume 135, Number 1 (pp. 10 to 26); SMPTE, 2026
<span class="doi">10.5594/JMI.2026/YOXS1352</span>
</li>