What is IPTV? Internet Protocol television (IPTV) IPTV is defined as multimedia services such as tv/video/audio/text/graphics/data delivered over IP based networks managed to provide the required level of quality of service and experience, security, interactivity and reliability.

IPTV history? 1994 first time television show was broadcast over internet by ABC - Word News Now. The term IPTV first appeared in 1995 with the founding of Precept Software by Judith Estrin and Bill Carrico. First continuous live webcasts started by Internet radio company AudioNet 10.Jan.1998

IPTV main services Live television Time-shifted television (replays) Video on demand (VOD) Radio broadcast Interactive applications (web browsing, e- mail, games and others) live television, with or without interactivity related to the current TV show; time-shifted television: catch-up TV (replays a TV show that was broadcast hours or days ago), start-over TV (replays the current TV show from its beginning); video on demand (VOD): browse a catalog of videos, not related to TV programming.

IPTV Architecture Content source (Video/stream store) Delivery and Management Network (Encode and stream servers. Multicast, Unicast) Home network (PC, TV, STB...)

IPTV Architecture 2

IPTV Security Objectives The main security objectives for IPTV service are: IPTV service should be high stable and high available. Only allowed people can access and operate on the IPTV services Abuse actions should be controlled to reduce garbage data. The IPTV service should be protected against unauthorized deletion, insertion, modification or replay attack. The IPTV service programs should be protected by copyrights.

IPTV Attacker's Goals Take control of home networks Service disruption Spreading worms, trojans, virus Broadcast own material (for political or other reasons) Steal the content For piracy or as simple as P2P TV source For free TV or VOD

IPTV Security Testing A combination of: Network penetration testing Web application security testing Device security testing Software vulnerability testing May also include Policy and procedure review

VOD Encryption Flow Process 1 The video stream enters the HTTP live streaming encoder. The encoder splits the continuous video stream into equal chunks of predefined duration (for example, 10s). The encoder transcodes each chunk into multiple different bit rates chunk files. 2 For each chunk, the encoder requests an encryption key from the VCAS for Internet TV server. The encoder encrypts each of the different bit rate chunk files with the provided encryption for the chunk. 3 The encoder creates the playlists and sends them together with the chunk files onto the HTTP content server. 4 A user device with a Verimatrix client requests the playlist for a particular piece of content from the content server. The Verimatrix client then requests the content key(s) from the VCAS for Internet TV server. 5 If the user's client device is authorized to receive the content key(s), the VCAS for Internet TV server returns the key(s) to the Verimatrix Client, and the client device can start decrypting and playing the content. If the user's client device is not authorized to receive the content key(s), the VCAS for Internet TV server denies the keys to the Verimatrix client in the client device

Verimatrix Encryption solusion

Verimatrix High-Level Architecture

Thank you for listening! Questions?