IoT security training: Camera Four

The Internet of Things (IoT) training in a 2:39 animated story. It covers Smart cameras and devices: default passwords, updates, separate networks. In English and Arabic, with captions you can switch on or off, and a scenario quiz at the end.

What your team will learn

Identify three settings that make a smart device easy to take over: a default password, a missing update, and a place on the same network as computers and servers.
State the three fixes for every smart device at work: its own password from the day it goes in, its updates (and a replacement once it is no longer supported), and its own network.
Explain how a hijacked device can join a botnet that attacks other companies.
Bring new smart devices at work through IT Support and the security team first, and report a device acting strangely to your security team.

The story

“Camera Four” is the story at the heart of this course. Sami (site security officer) is the lead character; the learner watches the situation unfold, spots the warning signs, and sees the right thing to do. Set in Nakhlora Group, a fictional Gulf company.

Sample quiz question

Fitting a new camera, the installer tells Sami: 'Leave the default password. I'll change it on my next visit.' What should Sami do?

Agree: the installer knows his own cameras best.
Change it now, before the camera goes into use.
Write it on the box so IT can change it later.
Set a reminder for the installer's next visit.

Correct answer: Change it now, before the camera goes into use.

Why: A default password is changed the day the device goes in. Until then, anyone who knows the default can take the camera over.

Full transcript

Transcript of the English video. The Arabic transcript is on the Arabic page.

Camera Four [0:01] Installer: Leave the default password. I'll change it on my next visit. [0:06] Sami: Fine by me, Bilal. Eleven more to fit, and these things look after themselves. [0:12] Narrator: Can you spot it? Three settings that make this camera easy to take over. [0:25] Narrator: Someone logs in from an unknown address, with the password it came with. [0:31] Narrator: Then the picture stutters: about 2,400 connections a minute, going out to other companies. [0:39] Omar: Default password. Old firmware. On the server network. And now it's attacking other companies. Cutting it off. [0:48] Omar: Security team? Omar, IT Support. The new server-room camera's been taken over. It's isolated; I'm calling Sami. [0:57] Sami: That's on me. I'd never leave a door on its factory code, and I left this camera on one. [1:04] Omar: No blame; we fix it. Default passwords are in manuals online. Attackers try them on every camera they find. [1:12] Omar: Once they're in, the camera joins a botnet: thousands of hijacked devices flooding other companies' websites with fake visitors. [1:21] Sami: And it sat on the server network, one step from our servers. They could have watched this room, too. [1:30] Sami: Twelve cameras, twelve different passwords. Changed the day they go in, not on the next visit. [1:38] Omar: Next, updates. Firmware, the camera's own software, goes to 2.4 on all twelve, and stays updated. [1:46] Omar: No longer supported means its maker has stopped fixing it. A camera like that gets replaced. [1:54] Sami: And all twelve move to their own network, CAMERAS, away from the servers and everyone's laptops. [2:03] Narrator: New smart devices at work, like cameras and screens, go through IT Support and your security team first. [2:10] Narrator: A device acting strangely, like a picture that stutters? Report it to your security team. [2:20] Sami: Twelve of twelve. Same rules as the front door from now on. [2:26] Narrator: Every smart device at work gets its own password, updates and network from day one. Anything odd? Contact your security team.

Key facts

Length (English)	2:39
Length (Arabic)	3:08
Languages	English · العربية
Captions	WebVTT
Quiz bank	14
Questions shown	10
Pass mark	80
Lead character	Sami — site security officer
LMS id	2035