Analysis of security vulnerabilities in the movie production and distribution process

ABSTRACT

Unauthorized copying of movies is a major concern for the motion picture industry. While unauthorized copies of movies have been distributed via portable physical media for some time, low-cost, high-bandwidth Internet connections and peer-to-peer file sharing networks provide highly efficient distribution media. Many movies are showing up on file sharing networks shortly after, and in some cases prior to, theatrical release. It has been argued that the availability of unauthorized copies directly affects theater attendance and DVD sales, and hence represents a major financial threat to the movie industry. Our research attempts to determine the source of unauthorized copies by studying the availability and characteristics of recent popular movies in file sharing networks. We developed a data set of 312 popular movies and located one or more samples of 183 of these movies on file sharing networks, for a total of 285 movie samples. 77% of these samples appear to have been leaked by industry insiders. Most of our samples appeared on file sharing networks prior to their official consumer DVD release date. Indeed, of the movies that had been released on DVD as of the time of our study, only 5% first appeared after their DVD release date on a web site that indexes file sharing networks, indicating that consumer DVD copying currently represents a relatively minor factor compared with insider leaks. We perform a brief analysis of the movie production and distribution process and identify potential security vulnerabilities that may lead to unauthorized copies becoming available to those who may wish to redistribute them. Finally, we offer recommendations for reducing security vulnerabilities in the movie production and distribution process.

REFERENCES

• 1: Associated Press. First movie distributed via satellite opens in New York. CNN.com, 17 November 2000. http://www.cnn.com/2000/TECH/computing/11/17/digital.theater.ap/.
• 2: Associated Press. Record industry to sue downloaders. CNN.com, 26 June 2003. http://www.cnn.com/2003/TECH/internet/06/25/download.suits. ap/index.html.
• 3: P. Biddle, P. England, M. Peinado, and B. Willman. The darknet and the future of content distribution. In Proceedings of the 2002 ACM Workshop on Digital Rights Management, Washington, DC, 18 November 2002. http://crypto.stanford.edu/DRM2002/darknet5.doc.
• 4: R. W. Butler. Movie industry battles film piracy on many fronts. The Kansas City Star, 22 June 2003. http://www.kansascity.com/mld/kansascitystar/6141893.htm.
• 5: C. E. R. T. (CERT). CERT Homepage. http://www.cert.org/.
• 6: William R. Cheswick , Steven M. Bellovin , Aviel D. Rubin, Firewalls and Internet Security: Repelling the Wily Hacker, Addison-Wesley Longman Publishing Co., Inc., Boston, MA, 2003
• 7: Cinea. Cinea demonstrates field ready security solution for major studios, 18 July 2003. http://www.cinea.com/press/press_release_new.htm.
• 8: Cinea. Cinea, Sarnoff collaborate in developing anti-piracy technology to fight camcorder taping of movies in digital cinemas, 4 March 2003. http://www.cinea.com/press/press_release_03042003_2.htm.
• 9: M. Corperation. Next Generation Secure Computing Base, July 2003. http://www.microsoft.com/ngscb.
• 10: I. Cox, J. Kilian, T. Leighton, and T. Shamoon. Secure spread spectrum watermarking for multimedia. IEEE Transactions on Image Processing, 6(12):1673--1687, 1997.
• 11: Deloitte and Touche. The impact of piracy on the film industry, June 2003.
• 12: C. Eller and M. Cieply. The movie watchers are being watched. The Baltimore Sun, 31 March 2003. http://www.zeropaid.com/news/articles/auto/13302003c.
• 13: Simson Garfinkel , Gene Spafford, Practical Unix and Internet security (2nd ed.), O'Reilly & Associates, Inc., Sebastopol, CA, 1996
• 14: C. Gunter , S. Weeks , A. Wright, Models and Languages for Digital Rights, Proceedings of the 34th Annual Hawaii International Conference on System Sciences ( HICSS-34)-Volume 9, p.9076, January 03-06, 2001
• 15: L. Haberman. Hulk: It's not easy being CG. E! Online, 10 June 2003.
• 16: N. Haller. The S/Key™ One-Time Password System. In Proceedings of 1994 Internet Society Symposium on Network and Distributed System Security, pages 151--157, February 1994. San Diego, CA.
• 17: P. Huffstutter. How Hulk crushed the online pirate. Los Angeles Times, 26 June 2003. http://www.latimes.com/business/la-fi-hulk26jun26224419,1,1391001.story.
• 18: A. W. Mathews, B. Orwall, and K. Chen. Pursuing Oscars, big studios give pirates a hand. The Wall Street Journal, page~A1, 3 March 2003.
• 19: E. McCarthy. A new focus on movie piracy: Battling bootleggers with distortion. The Washington Post, page~E5, 14 October 2002. http://www.washingtonpost.com/c2/wp-dyn?pagename=article&node= &contentId=A18443-2002Oct12.
• 20: E. McClam. N.J. man pleads guilty to posting 'Hulk' bootleg. Newsday.com, 25 June 2003. http://www.newsday.com/news/local/wire/ny-bc-nj--hulkbootleg0625jun25,0,5965106.story?coll=ny-ap-regional-wire.
• 21: P. McDaniel. Authentication. In The Internet Encyclopedia. John Wiley and Sons, Inc., 2002.
• 22: Motion Picture Association of America. Anti-piracy, 2003. http://www.mpaa.org/anti-piracy/.
• 23: C. Nelson. Epic records takes steps to seal its newest music. The New York Times, page C7, 16 September 2002.
• 24: Peter G. Neumann, Computer related risks, ACM Press/Addison-Wesley Publishing Co., New York, NY, 1995
• 25: A. Ramanujapuram and P. Ram. Digital content and intellectual property rights. Dr. Dobb's Journal, May 1998.
• 26: S. Rea. Studios battling movie piracy. The Philadelphia Inquirer, 15 May 2003. http://www.philly.com/mld/inquirer/news/frong/5864665.htm.
• 27: Reuters. N.J. man admits guilt over 'Hulk' bootleg. CNN.com, 26 June 2003.
• 28: Pamela Samuelson, DRM {and, or, vs.} the law, Communications of the ACM, v.46 n.4, April 2003 [doi>10.1145/641205.641229]
• 29: A. Seiler and M. Snider. The movie industry fights off the pirates. USA Today, 6 May 2003. http://www.usatoday.com/tech/news/2003-05-06-movies-piracy_x.htm.
• 30: D. Serafini. DVD piracy in the U.S. becomes an industry. Video Age International, 23(2), March--April 2003. http://www.videoageinternational.com/2003/articles/March/piracy.htm.
• 31: E. A. Taub. Among film's ghosts, its future. The New York Times, 19 June 2003. http://www.nytimes.com/2003/06/19/technology/circuits/19cine.html.
• 32: J. Valenti. A clear present and future danger: The potential undoing of America's greatest export trade prize. Testimony before the House Appropriations Subcommittee on Commerce, Justice, State, the Judiciary, and Related Agencies, 23 April 2002. http://www.mpaa.org/jack/2002/2002_04_23b.htm.
• 33: R. Wray. Matrix downloaded: Net piracy could cost film business billions. The Guardian, 4 June 2003. http://film.guardian.co.uk/news/story/0,12589,969754,00.html.

INDEX TERMS

Primary Classification:
  K. Computing Milieux
  K.4 COMPUTERS AND SOCIETY
      K.4.4 Electronic Commerce
          Subjects: Security

General Terms:
Measurement, Security

Keywords:
digital rights management, file sharing, insider attacks, multimedia, physical security, policy