ArcSoft, the global leader of image-intelligent technologies, announced a new set of security upgrades for simplicam powered by Closeli, its first home monitoring Wi-Fi camera with face recognition.
“As we continue to push the boundaries of innovation in the IoT with developments like face recognition, we also want to continue innovating and improving simplicam’s security,” said Caroline Tien-Spalding, Sr. Director of Product and Marketing, ArcSoft. “By releasing this mandatory security update, we ensure our users continue to enjoy the peace of mind simplicam offers, knowing their videos are protected against all hackers and online attacks.”
With help from security startup Synack, Inc., the simplicam security team identified places in the simplicam and Closeli software where the existing protection could be improved even more. The resulting improvements have been released to all simplicam customers over the past month through a mandatory firmware upgrade, ensuring every simplicam in use is outfitted with the best security possible.
Says Tien-Spalding, “we look forward to a continued partnership with the security community as we all work toward a common goal – making sure Internet of Things users are safe and well protected.”
In addition to the existing security in simplicam and Closeli – bank-level AES 256-bit encryption on all videos, proprietary video formatting that can only be interpreted by ArcSoft’s software, and HTTPS communication connections – the following improvements have been made in the newest mandatory simplicam firmware upgrade:
- Improved communication security – ensure all communications, including initial connection requests and streaming communications, are performed using a secure SSL/HTTPS connection.
- Improved SSL certificate validation – HTTPS communications between simplicam and the Closeli servers are now even more secure.
- Improved private keys – upgrade private keys to longer length, and ensure all API keys are generated securely and properly protected.
- These improvements will be presented by Synack, Inc. next month as part of Def Con 23 and the IoT village.