Security implications of HDMI Ethernet Channel

by George Chetcuti [Published on 10 Sept. 2012 / Last Updated on 10 Sept. 2012]

VGA is almost dead and with new PCs and laptops we get HDMI, but under the hood this brings many other capabilities than just displaying video. HDMI Ethernet Channel could circumvent corporate security in a number of ways, such as through the use of network-enabled display technologies and via HEC-enabled corporate laptops, but the technology is still largely unsupported. Often in a corporate environment visitors will bring their own laptops to meeting rooms to deliver presentations on either a projector or a large-screen TV. Both of these display technologies are commonly network-enabled and often connected to the corporate network. If HEC capabilities are supported by the display device and the visitor's laptop, there is a distinct possibility that the visitor's laptop may become connected to the corporate network, where it could introduce (inadvertently or otherwise) malware onto the network.
Download the full nccgroup paper here - http://www.nccgroup.com/secure/6yA0Ulu8kN4%3d/1079/

VGA is almost dead and with new PCs and laptops we get HDMI, but under the hood this brings many other capabilities than just displaying video. HDMI Ethernet Channel could circumvent corporate security in a number of ways, such as through the use of network-enabled display technologies and via HEC-enabled corporate laptops, but the technology is still largely unsupported. Often in a corporate environment visitors will bring their own laptops to meeting rooms to deliver presentations on either a projector or a large-screen TV. Both of these display technologies are commonly network-enabled and often connected to the corporate network. If HEC capabilities are supported by the display device and the visitor's laptop, there is a distinct possibility that the visitor's laptop may become connected to the corporate network, where it could introduce (inadvertently or otherwise) malware onto the network.

Download the full nccgroup paper here - http://www.nccgroup.com/secure/6yA0Ulu8kN4%3d/1079/

Add Review or Comment

See Also

Featured Links