Stock Abbreviation : Topsec      Stock Code : 002212
7*24 hour service: 400-777-0777

IPTV security assessment project of an operator

Zero incidents | No point lost | Sound security work

Background

IPTV business is now characterized by the increasing number of users, complex network architecture, frequent business iterations, and diverse business forms. Due to business needs, many partners are introduced, and IT assets continue to increase with business development. Therefore, the security risks are high.

After one year of security operation and maintenance, security risks have been greatly reduced. However, the safety technical measures are still weak and there are no pertinent technical detection measures.

Activity & Announcement
Solution architecture

In this project, the Topsec security service team provides the following application security service solution based on the IPTV business process requirements:

1) Asset research service

Sort out the IPTV business process, and conduct research on the related assets through manual research.

2) Penetration testing service

Simulate hackers to mine asset vulnerabilities in business processes, including system vulnerabilities, application vulnerabilities, and app client vulnerabilities. Use these asset vulnerabilities to simulate attacks, provide reinforcement suggestions after the attacks, and test vulnerabilities again after reinforcement.

3) App client evaluation

Based on business characteristics and processes, carry out security evaluation from three perspectives: IPTV client, WAN data transmission, and application server authentication. Provide reasonable security suggestions after the evaluation.

4) Code audit service

Conduct security audits on the program source code uploaded to the application server by local and outsourced personnel to eliminate security issues such as program backdoors and code loopholes, and re-test the debugged source code to ensure the normal operation of the business background.

Value to customer
Smooth operation of the business system

During the year of service, the IPTV business system ran smoothly, and there was no network security incident throughout the year.

Normal operation of the IPTV service

In the provincial network security attack and defense confrontation drill, the IPTV service was running normally, security protection was effective, and the defense objectives were successfully achieved.

No point lost

The IPTV system had passed various network security inspections, including on-site technical inspections conducted by the State Administration of Radio, Film and Television (SARFT), the operator's Group company, and regulatory agencies, and no point was lost in the inspections.

Sound security work

During the Spring Festival, Two Sessions, and major events, the information security work was successfully completed.