Digital eyes and ears

Leveraging your existing network to act as a security system is certainly cost-beneficial, from both the hardware and staffing perspective. But it's also a way to beef up security. IP video-surveillance systems offer features far more advanced than what you can get from standard analog CCTV (closed circuit TV). It's no wonder these systems are becoming increasingly popular in the enterprise.

We recently put two IP surveillance management systems to the test: Axis Communications' ACS (Axis Camera Station) is a functional yet low-cost camera management system, whereas On-Net Surveillance Systems' NetDVR-64 clearly represents the high end of this market, boasting an amazing set of features and a price to match. Our tests brought to light several important factors for you toconsider when choosing and implementing a surveillance management system.

First, you will need high-performance hardware. Although fairly heavily muscled, the test machines we used in this review were often put under severe disk and CPU strain when performing advanced functions such as date-and-time-based searching.

Second, you will need plenty of storage. Even when we only recorded events at a rate of just 10 frames per second (a low frame rate that still provides image quality high enough for facial recognition even at a dead run), we stored more than 1.5GB of data per camera per day. Multiply that by 100 cameras, and the storage requirements for recording 24/7 would quickly eat you out of house and home. Configuring cameras to transmit live images at a constant rate while recording only a small number of images can save lots of disk space.

A third thing to keep in mind is the security of the camera itself. Password protection is important, but so is defending these appliances against network threats. Wireless cameras are especially vulnerable to DoS attacks, and relatively few camera manufacturers have taken this into account.

Axis Camera Station

Axis Communications sent us its ACS 1.0 software package and two cameras, the tiny but powerful Axis 205 and the full-featured Axis 210. ACS is designed to run as many as 25 Axis cameras from a single management or surveillance console.

We installed ACS on a Hewlett-Packard workstation equipped with a 2.4GHz Intel Pentium 4 CPU, 512MB of RAM, and a video subsystem centered on 128MB of dedicated video memory. The system was running Windows XP with .Net installed, as ACS requires. Your initial ACS license will cover 10 cameras, but additional cameras can be added in single- or five-camera increments.

ACS is capable of scanning any single range of IP addresses or a full subnet in search of cameras to manage. In our case, we had it scan three different class-C subnets. ACS first uses a simple ping to find IP addresses that are active and then performs a more intensive scan for video cameras culled from that subset. This works fine, but to keep it working, you can't have ICMP (Internet Control Message Protocol) ping filters between you and your cameras. The upside is that you don't need static IP addresses on your cameras, just on the ACS console.

One of the things we liked about ACS is that it doesn't require cameras to support motion detection. All you need is an active camera, and ACS will allow you to set desired motion-detection areas using on-screen squares; you simply place them over those portions of the image where you want to detect movement. You can also detect motion using IR (infrared) sensors placed around the room, allowing the camera to follow someone walking through the room by keying on each IR device.

ACS' playback feature is also nicely equipped. The user interface is identical to the monitor view and is capable of doing video playback on multiple cameras simultaneously after a short disk-access delay. Although our HP workstation is fast, we might have improved performance by installing faster disk drives.

Video is searchable by date and time and can be accessed on a single- or multiple-camera basis. In multiple-camera mode, a search will automatically sync all the camera views to the specified date and time -- very handy in forensic investigation. A word of caution: Each camera maintains its own time clock for this purpose, so having an accurate NTP (Network Time Protocol) server available on the LAN is a must for accurate searching.