OTT Streaming Security Checklist
Working Group:
In Collaboration With:
Project Status:
Completed
The project has been completed.
Start:
Target End:
Problem Statement
Project Description
Published Documents
SVTA5056: OTT Streaming Security Checklist
As more direct-to-consumer Over-the-Top (OTT) apps are making their way to the marketplace, it is helpful to provide a single checklist that contains a list of the security options in use by contemporary OTT services. This ensures that security options are taken into consideration every step of the way, from design and architecture, to development and test, and finally to live operation. This will also provide an understanding of potential security risks that may be presented when certain security options are foregone.
This document provides an end-to-end security checklist that an OTT service provider, technology vendor, and service developer can reference as they seek to improve content protection on OTT streaming services.
Goals and Objectives
- It is a list of the common controls used in streaming services. “That’s a good idea – I should explore further.”
- It is not mandatory. The checklist simply lists controls in common use. Operator requirements will vary.
- It will focus more on consumer content streaming rather than other areas – IT/cloud/content handling/etc.
- It may span both product and technical controls.
- It will include a simple description for each control.
- It will include detailed controls where it adds value, but we will generally aim for coverage rather than depth.
- It will include notes to give additional information where required. (e.g. this control protects against xyz).
- It will avoid configuration or implementation information.
Project Scope
- Registration
- User Management (Login, etc)
- Playback Control
- Geo-Restriction
- CDN
- DRM
- Usage Rules (Concurrency limits, etc)
- Watermarking
- IT
- Application
- Data Center
- Cloud
- Operational Processes (Non-streaming specific)
Contributors
The following members have contributed to this project. Click on their name to visit their profile. If they have not published their profile, the link will redirect to their LinkedIn profile.
