Security Challenges and Mitigation Strategies in IoT-Enabled Video Surveillance Systems: A Systematic Review

The rapid deployment of Internet of Things (IoT)-enabled video surveillance systems has expanded the capabilities of real-time monitoring in smart cities, healthcare facilities, industrial environments and critical infrastructure. However, integrating resource-constrained cameras, heterogeneous communication protocols, edge/cloud analytics, and sensitive video data creates a complex cybersecurity landscape. This systematic review synthesizes recent evidence on security challenges and mitigation strategies in IoT-enabled video surveillance systems. Following the PRISMA 2020 guidelines, four bibliographic databases (Scopus, IEEE Xplore, Web of Science, and Google Scholar) were searched for peer-reviewed journal articles and conference papers published between January 2021 and July 2025. After duplicate removal, title/abstract screening, full-text assessment, and quality appraisal, 21 studies were included for qualitative synthesis. The findings show that vulnerabilities occur across three interdependent architectural layers: device/perception, network/communication, and application/cloud. The frequently reported weaknesses were default credentials, insecure firmware, unencrypted video streams, weak protocol configuration, metadata leakage, and inadequate cloud access control. Existing mitigation strategies, including multi-factor authentication, role-based access control, TLS/DTLS, lightweight encryption, intrusion detection systems, and secure boot, provide partial protection but remain constrained by latency, computational overhead, energy consumption, scalability, cost and legacy device compatibility. This review further identifies a persistent research–practice gap: only a small subset of studies provides evidence of real-world deployments, while most solutions remain evaluated in simulations, testbeds, or conceptual frameworks. This review contributes a domain-specific taxonomy of IoT video surveillance security, a comparative evaluation of mitigation strategies using technical, operational, and economic criteria, and deployment-oriented recommendations for smart city, industrial, healthcare, residential, and critical infrastructure settings. The study highlights the need for cross-layer security architectures, lightweight and post-quantum-ready cryptography, privacy preservation, edge AI, federated learning, zero-trust access control, and standardized security baselines.