Terence and others: If you are interested in examining the firmware in greater detailed, please take a look at the squashfs dump from my Sercomm/Sensormatic/ADT iCamera1000. This was binwalk'd from the complete flash dump as generated by executing /adm/flash_dumper.cgi. The www files are located in /usr/local/www. Of particular interest are file.cgi and ez.cgi - ARM ELFs that provide much of the functionality accessible through the web API. Most CGIs simply link to those two files.
I'm currently looking for some insights into how Sercomm builds their firmware update packages.