Hikvision Digital Technology Co., Ltd.

Again, I think it's really about taking a proactive approach.

There was a report that just recently came out about access control cameras and Hikvision.

It was listed as 9.8 out of 10 on the vulnerability scale.

And so the question is, how are your access control cameras connected into the rest of your systems and network? An attacker could potentially get in through those vulnerabilities and tie into ways that you would not even necessarily anticipate.

Facial recognition is-- Some of the major companies that do facial recognition, uh, you know, uh, uh, manufacturing and, and laboratories for it are, are in China.

And interesting, a lot of the people who work in facial recognition and are in, you know, Hikvision and, and, and, and TimeSense, a whole bunch of very well-known manufacturing companies came out of, um, uh, you know, laboratories from America, from Microsoft and other places.

So again, this raises the question of was this early engagement, uh, uh, an erroneous, uh, uh, sort of a policy that, that came a cropper.

Uh, I'll, I'll come back to the-

The first is product security.

So in 2021, the Australian Cybersecurity Center warned about a flaw in certain Hikvision cameras that could let an attacker take control of the device and target other systems on the same network.

This proves that the camera had a serious vulnerability, but it doesn't prove that Beijing planted or exploited it.

Now, the second concern is strategic.

Yep, and they can sit there for a long time.

And again, second point is that your network hard work Like, okay, to give an example, like Huawei, not Huawei, what was it? Hikvision.

Yeah.

Hikvision cameras, right? They are very popular in a lot of parts of the world.

And important point about them is that they don't expose you any OS level interface.

So if an attacker goes to cold execution on those, like a zero day, for example, or older known vulnerabilities for them, and sits on one of those cameras, he can sit there for a long time.

In other words, you can't just, I don't know, ship something with a sticker, right, and slap a sticker on it and say it was made in the U.S.A. Here's where the NDAA part comes in.

NDAA says manufacturers cannot use major components, chipsets, or software from blacklisted foreign companies such as Hikvision, Dahoe, and Huawei, among others.

Pat, I'm going to get with you on this first.

You guys do a lot of work with companies that not only use here in the States, but also globally.