A security system is designed to increase safety and protect people and goods. Because security systems are now connected to the company network, new risks have arisen. To prevent the security system itself from becoming a target for criminals, hardening is applied to these systems (servers and IP-based hardware).

Hardening is the process of disabling unnecessary functions and/or security risks and encrypting connections. This is to make it as difficult as possible for potential attackers to gain access to a system or to counteract intruders so that they can do little to no damage. And finally, if the attacker intercepts data, it must be made as difficult as possible for them to use this data.

The hardening measures that can be taken to achieve this are diverse. We will name a few:

• deletion of unnecessary user accounts;
• applying a sound password policy;
• restricting access to the system based on IP addresses;
• use encryption for the connections to and from the system;
• special network settings, such as encryption and access protocols;
• Implement an active policy with regard to software and firmware updates, with security patches being given high priority.

To get the most out of security systems, links are often made to other systems using an API/SDK. This form of openness provides a great deal of convenience because collaboration with other systems is possible, but it also requires the necessary attention from both the installer and the IT department. It is advisable to protect data with passwords and to systematically monitor manipulations from outside.