Designing Secure ST 2110 Systems
Metadata
- Publisher
- SMPTE — Pasadena, CA
- Doc Type
- Conference Paper
- Content Type
- Original Research
- Volume
- 00, pp. 1–20
- Abstract
- The broadcast industry's transition from traditional Serial Digital Interface (SDI) to IP-based infrastructures, guided by the SMPTE ST 2110 suite, offers immense flexibility but exposes critical operations to significant cybersecurity threats. This paper addresses these challenges by proposing a comprehensive best practice guidelines tailored for ST 2110 environments, drawing on established industry standards. Leveraging the EBU's Technology Pyramid for Media Nodes (EBU Tech 3371) and key recommendations on equipment security and vulnerability management, our framework provides a practical blueprint for designing secure IP media facilities. We identify unique vulnerabilities inherent to ST 2110, including the critical dependency on Precision Time Protocol (PTP) for synchronization and the lack of native authentication on media streams. To mitigate these risks, the framework integrates multi-layered controls: robust network segmentation, secure control protocols via AMWA NMOS, continuous monitoring, and device hardening. Furthermore, we explore the application of Zero-Trust Architecture (ZTA), which treats every device and network flow as untrusted by default, and thus requires continuous authentication and authorization when interacting in the network. ZTA offers a robust, forward-looking strategy to reduce the attack surface in modern, distributed broadcast workflows. In summary, this paper provides broadcast engineers with actionable technical guidance to evolve their security from a traditional perimeter model to a modern, zero-trust approach, ensuring the benefits of IP-based media production can be realized without compromising on resilience or operational integrity.
- Publication Date
- 2025-10-13
- ISBN
- Electronic:
978-1-61482-966-9 - Author(s)
- Endrit VorfajCarmela Troncoso
- Keyword(s)
- ST 2110, IP Media, Broadcast Security, Cybersecurity, Zero Trust Architecture, EBU Tech 3371, System Security
- Copyright
- © 2025 SMPTE
Bibliographic Reference(s)
- SMPTE, “SMPTE ST2110–10: Professional Media over Managed IP Networks - System Timing and Definitions,” Mar. 2022. [Online]. Available: https://pub.smpte.org/pub/st2110-10/st2110-10-2022.pdf EXTERNAL
- SMPTE, “SMPTE ST2110–20: Professional Media Over Managed IP Networks - Uncompressed Active Video,” Dec. 2022. [Online]. Available: https://pub.smpte.org/pub/st2110–20/st2110–20-2022.pdf EXTERNAL
- SMPTE, “SMPTE ST2110–30: Professional Media Over Managed IP Networks - PCM Digital Audio,” Nov. 2017. [Online]. Available: https://pub.smpte.org/pub/st2110-30/st2110-30-2017.pdf EXTERNAL
- SMPTE, “SMPTE ST2110–40: Professional Media Over Managed IP Networks - Ancil-lary Data,” Jun. 2023. [Online]. Available: https://pub.smpte.org/pub/st2110–40/st2110–40-2023.pdf EXTERNAL
- SMPTE, “SMPTE 259M: Serial Digital Interface,” 2008. [Online]. Available: https://ieeexplore.ieee.org/document/7291225 EXTERNAL
- T. Orme, “Video Transport: SDI vs IP-Timing Is Everything,” The Broadcast Bridge, Jun. 2016, [Online]. Available: https://www.thebroadcastbridge.com/content/entry/6066/video-transport-sdi-vs-ip-tim-ing-is-everything EXTERNAL
- RGB Communications, “Understanding AV over IP: What It Is & Why It Matters,” RGB Communications News, Mar. 2025, [Online]. Available: https://www.rgb-comms.co.uk/news/2025/April/understanding-av-over-ip-what-it-is-and-why-it-matters EXTERNAL
- J. S. Gansler and W. Lucyshyn, “Commer-cial-Off-The-Shelf (COTS): Doing It Right,” Sep. 2008. [Online]. Available: https://apps.dtic.mil/sti/tr/pdf/ADA494143.pdf EXTERNAL
- SMPTE, “st2022–6-2012,” 2012, Accessed: Sep. 27, 2025. [Online]. Available: https://pub.smpte.org/pub/st2022–6/st2022–6-2012.pdf EXTERNAL
- SMPTE, “ST 2059–2:2021 - SMPTE Profile for Use of IEEE-1588 Precision Time Protocol in Professional Broadcast Applications,” 2021. EXTERNAL
- “What Is SMPTE 2110? NMOS Standards.” [Online]. Available: https://net-insight.net/blog/what-is-smpte-2110-and-nmos-all-about/ EXTERNAL
- W. Alghamdi and M. Schukat, “Advanced methodologies to deter internal attacks in PTP time synchronization networks,” in 2017 28th Irish Signals and Systems Conference (ISSC), IEEE, 2017, pp. 1–6. EXTERNAL
- Embrionix, “Transparent Boundary Clock ST2059 in Broadcast,” 2021. [Online]. Available: https://www.embrionix.com/en/resource/transparent_bound-ary_clock_ST2059_in_broadcast EXTERNAL
- H. Weibel and D. Béguelin, “Implementation and Performance of Time Stamping Techniques,” IEEE Communications Magazine, vol. 54, no. 10, pp. 121–129, 2016. EXTERNAL
- B. Gilmer, “AMWA NMOS: The whole story”. EXTERNAL
- Advanced Media Workflow Association (AMWA), “NMOS IS-04: Discovery and Registration Specification,” 2025. [Online]. Available: https://specs.amwa.tv/is-04/ EXTERNAL
- A. M. W. Association (AMWA), “IS-05: NMOS Connection Management,” 2025. [Online]. Available: https://specs.amwa.tv/is-05/ EXTERNAL
- L. Conklin, “Threat Modeling Process.” [Online]. Available: https://owasp.org/www-community/Threat_Modeling_Process EXTERNAL
- T. W. Edgar and D. O. Manz, “Addressing the Adversary,” Research Methods for Cyber Security, pp. 345–366, 2017, doi: 10.1016/B978-0-12-805349-2.00014-5. EXTERNAL
- J. Nadeau, “83% of organizations reported insider attacks in 2024,” Nov. 2024. [Online]. Available: https://www.ibm.com/think/insights/83-percent-organizations-reported-in-sider-threats-2024 EXTERNAL
- I. Corp, “Intel® Precision Time Protocol Servo (Intel® PTP Servo) Solution for Time Synchronization Applications Executive Summary.” Accessed: Sep. 28, 2025. [Online]. Available: https://cdrdv2-public.in-tel.com/784715/ptp-servo-solution-for-time-synchronization-applications-white-paperpdf EXTERNAL
- “BIND 9.” [Online]. Available: https://www.isc.org/bind/ EXTERNAL
- A. M. W. Association (AMWA), “BCP-003–01: Secure Communication in NMOS Systems,” 2025. [Online]. Available: https://specs.amwa.tv/bcp-003–01/ EXTERNAL
- S. P. S. Europe, “nmos-cpp: AMWA NMOS APIs C++ Implementation,” 2025. [Online]. Available: https://github.com/sony/nmos-cpp EXTERNAL
- Red Hat Inc., “Keycloak: Open Source Identity and Access Management,” 2025. [Online]. Available: https://www.keycloak.org/ EXTERNAL
- EBU, “Tech 3371 THE TECHNOLOGY PYR-AMID FOR MEDIA NODES MINIMUM USER REQUIREMENTS TO BUILD AND MANAGE AN IP-BASED MEDIA FACILITY USING OPEN STANDARDS & SPECIFICATIONS,” Apr. 2023. EXTERNAL
- Advanced Media Workflow Association, “AMWA IS-10: NMOS Authorization Specification,” 2022. [Online]. Available: https://specs.amwa.tv/is-10/re-leases/v1.0.1/docs/Overview.html EXTERNAL
- S. Rose, O. Borchert, S. Mitchell, and S. Connelly, “Zero Trust Architecture,” Aug. 2020. doi: 10.6028/NIST.SP.800-207. EXTERNAL
- “Inter-Entity Trust Boundary,” Aug. 2023. [Online]. Available: https://pub.smpte.org/pub/rp2129/rp2129–2023.pdf EXTERNAL
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/978-1-61482-966-9-12.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
Endrit Vorfaj and Carmela Troncoso; Designing Secure ST 2110 Systems, MTS 2025, Article 12 (pp. 1 to 20); SMPTE, 2025, ISBN: 978-1-61482-966-9
Snippet:
Endrit Vorfaj and Carmela Troncoso; Designing Secure ST 2110 Systems, MTS 2025, Article 12 (pp. 1 to 20); SMPTE, 2025, ISBN: 978-1-61482-966-9
HTML (ISO 690 compliant)
Preview:
Endrit Vorfaj and Carmela Troncoso; Designing Secure ST 2110 Systems, MTS 2025, Article 12 (pp. 1 to 20); SMPTE, 2025, ISBN: 978-1-61482-966-9
Snippet:
<span class="citation">Endrit Vorfaj and Carmela Troncoso; <cite>Designing Secure ST 2110 Systems</cite>, MTS 2025, Article 12 (pp. 1 to 20); SMPTE, 2025, ISBN: 978-1-61482-966-9</span>
SMPTE's HTML Pub
Preview:
Endrit Vorfaj and Carmela Troncoso; Designing Secure ST 2110 Systems, MTS 2025, Article 12 (pp. 1 to 20); SMPTE, 2025, ISBN: 978-1-61482-966-9
Snippet:
<li> Endrit Vorfaj and Carmela Troncoso; <cite id="bib-978-1-61482-966-9-12">Designing Secure ST 2110 Systems</cite>, MTS 2025, Article 12 (pp. 1 to 20); SMPTE, 2025, ISBN: 978-1-61482-966-9 </li>