Â鶹ԼÅÄ

As part of our work on the AMWA NMOS broadcast production APIs we’re looking at how they can be used with the HTTPS protocol. We’ve now taken a big step forward by releasing Â鶹ԼÅÄ R&D White Paper 337 on secure HTTPS configurations for APIs used in broadcast production systems.

Composite image above includes 'ssl' (edited) by on Flickr, .

As with an increasing number of websites, the Â鶹ԼÅÄ R&D blog now shows you a little green padlock at the top of your screen to show that you are communicating with our website over a connection secured with . HTTPS is a secure version of the HTTP protocol originally devised by as part of his work on the . HTTPS has become a cornerstone if IT security, and used well it serves to protect some of our most sensitive information as it moves around the web - credit card details, passwords and even the content you are reading now.

We know that security has to be an important consideration for broadcasters, and as such is a key requirement for  our IP Studio project - the served as a sobering reminder that broadcasters are a very real target for cyber-attacks. As we move to an all IP broadcast future we must also make sure that the new technologies we develop are hardened against attacks that could disrupt our operations. One of the reasons behind our choosing to promote the use of web technologies in broadcast centres was that they have tried and tested security mechanisms. Isolating broadcast networks from the outside world is not sufficient – control systems still provide opportunities for attackers to access the network by other means.

Â鶹ԼÅÄ R&D - IP Studio

Â鶹ԼÅÄ R&D - IP Studio: Lightweight Live

Regular followers of our blog will have seen our work on the AMWA NMOS open specifications; HTTP APIs for doing and for IP broadcast devices. These APIs are an important building block for the future broadcast centres. They provide a common mechanism for finding and connecting IP broadcast devices that are non-proprietary, and as such simplifies working with devices from multiple vendors. We've worked closely with manufacturers on these specifications, and .

Getting HTTPS right can be difficult. A significant issue is that there are many different permutations it can be configured in. HTTPS's security comes from "tunnelling" HTTP through another protocol - historically this may have been a protocol called SSL (Secure Socket Layer), but now should be TLS (Transport layer security) version 1.2. Continuing to use SSL or an older version of TLS leaves HTTPS open to a range of attacks. Add to this a baffling menagerie of different algorithms that can be used for the various operations required for TLS to work and there is significant opportunity of vulnerability and incompatibility unless we consider these issues carefully.

Our first step towards solving this has been the publication of Â鶹ԼÅÄ R&D White Paper 337 - "HTTPS Configuration for the NMOS APIs", outlining the Â鶹ԼÅÄ's preferred way of using HTTPS with the NMOS APIs, based on current industry best practice. While secure transport using the HTTPS protocol is by no means the entire solution to securing our APIs we believe it is a vital first step which we can then build on.

This white paper is important for anyone currently implementing these APIs, but is also an interesting read for anyone interested in knowing more about how HTTPS works, and how it keeps all our information secure as it delves into the detail of this ubiquitous protocol.

This is a first step in investigating how we secure the broadcast system of the future, but an important one. We’ll be publishing more work in this area soon, so watch this space!

-

Â鶹ԼÅÄ R&D - Securing the Future of Broadcast with Public Key Infrastructure

Â鶹ԼÅÄ R&D - Discovery and Registration in IP Studio

Â鶹ԼÅÄ R&D - HTTPS Configuration for the NMOS APIs: Securing IP Production Control

Â鶹ԼÅÄ R&D - Public Key Infrastructure for IP Production for Broadcast

Â鶹ԼÅÄ R&D - Media Synchronisation in the IP Studio

Â鶹ԼÅÄ R&D - Industry Workshop on Professional Networked Media

Â鶹ԼÅÄ R&D - IP Studio: 2017 in Review - 2016 in Review

Â鶹ԼÅÄ R&D - Industry Workshop on Professional Networked Media

Â鶹ԼÅÄ R&D - High Speed Networking: Open Sourcing our Kernel Bypass Work

Â鶹ԼÅÄ R&D - Beyond Streams and Files - Storing Frames in the Cloud

Â鶹ԼÅÄ R&D - IP Studio Update: Partners and Video Production in the Cloud

Â鶹ԼÅÄ R&D - Running an IP Studio

Â鶹ԼÅÄ R&D - Building a Live Television Video Mixing Application for the Browser

Â鶹ԼÅÄ R&D - Nearly Live Production

Â鶹ԼÅÄ R&D - The IP Studio

Â鶹ԼÅÄ R&D - IP Studio at the UK Network Operators Forum

Â鶹ԼÅÄ R&D - Covering the Glasgow 2014 Commonwealth Games using IP Studio

Â鶹ԼÅÄ R&D - Investigating the IP future for Â鶹ԼÅÄ Northern Ireland