RTSP (Real Time Streaming Protocol)

Real Time Streaming Protocol (RFC 7826) controls the delivery of streaming media, pause, play, seek, independently of the transport (typically RTP). It is widely deployed in IP cameras and CCTV, where insecure default deployments have repeatedly enabled mass discovery and exploitation by botnets such as Mirai.

Categories: Radio Access NetworkThreats and AttacksProtocols and Standards

RTSP in context

The radio access network is the layer where mobile devices attach to the operator's infrastructure. Attacks in this layer include IMSI catching, rogue base stations, downgrade attacks and jamming, and defenses hinge on mutual authentication, integrity-protected signaling and Open RAN supply-chain hygiene.

Telecom threats range from opportunistic SMS phishing and SIM swap to nation-state grade location tracking and lawful-interception abuse. The common thread is that most attacks exploit the inherited trust model of legacy signaling. SS7 and Diameter were designed for a closed operator community that no longer exists.

To place RTSP in the wider telecom-security picture, review Telnet, HLS, OT, X1, ETSI and Incident Response.

Related terms

Related topic hubs

  • Diameter Attacks S6a IDR/PUR/CLR abuse, subscriber tracking, LTE signaling attacks.

More from the TelcoSec Glossary

Browse the full TelcoSec Glossary, the Ultimate Guide to Mobile Network Security, or the P1 Arsenal of telecom-security tools.