Is our smart TV or conference room system a security risk on the office network?
It can be. Smart TVs, screen-sharing boxes and conference systems are computers with microphones, cameras and network access, updated on their makers' schedule, if at all. Many contact vendor clouds all day, even in standby, and some accept screen sharing from anyone on the same network. Put them on their own network segment that cannot reach your file servers or the laptops presented on them, turn off features you do not use, change default passwords and apply updates. Then check what they actually do: watched from a SPANSPAN: switch port analyser. A switch setting that sends a copy of network traffic to one port, where a sensor can watch it. or TAPTAP: test access point. A small device that copies the traffic on a network cable for a sensor to watch. port, NetSenX sees their destinations and flags beaconing and scanning on every plan, without software on the device. Whether a vendor cloud abroad is acceptable is your decision; NetSenX shows the traffic, it does not judge the vendor.
Read next
Related questions
- A login from a new location: is it a breach or an employee on a new device?
- Do attackers leave anything behind after we rebuild our machines?
- Can we check our company network for botnet infections for free?
- What is a compromise assessment, and do we need one?
- A company in our sector was hacked. How do we check whether we are next?
Terms used here
- SPAN (switch port analyser)
- A switch setting that sends a copy of network traffic to one port, where a sensor can watch it.
- TAP (test access point)
- A small device that copies the traffic on a network cable for a sensor to watch.