Biting the hand that feeds IT
Biting the hand that feeds IT
|
|
Original URL: http://www.theregister.co.uk/2007/04/25/optical_hacking/
Optical links are not as secure as might be assumed. Techniques for extracting data flowing over fibre optic links are evolving to make the technique easier to apply.
Instead of breaking a fibre and installing a device (splicing), an approach that might easily be detected, off-the shelf equipment makes it possible to extract data from an optical link without breaking a connection.
Splitter or coupler methods rely on bending the glass of a fibre-optic cable. If this bend is beyond a particular radius, a small amount of light leaks out. With modern receivers, only a small amount of light needs to be captured (0.1dB of the optical rating is enough) to extract the data from an optical link.
A simple clip-on device - such as the FCD-10B bend coupler from Canadian firm Exfo - is enough to achieve the job.
At the Infosecurity show in London, Swiss encryption appliance firm Infoguard demonstrated the use of optical tapping to intercept a Voice over IP call travelling across an optical link (picture above). There was no noise on the line while the tap was in progress. A PC connected to the optical link via a media recorder was able to recover the unencrypted data flowing over the link.
The scenario of optical hacking might appear like the fodder from Hollywood hacksploitation flicks rather than a practical threat. However, Infoguard said that in 2003 an illegal eavesdropping device was found attached to Verizon's network. Investigators probing the hack reckoned it was motivated by an attempt to access the quarterly statements of a mutual fund company. The perps were never identified.
Infoguard staged the demo in order to illustrate the point that firms need to encrypt data traveling over optical links, using devices such as its 10Gbps EtherGuard appliances. ®
Gunplay fingered for internet slowdown (22 August 2007)
http://www.theregister.co.uk/2007/08/22/gunplay_triggers_net_slowdown/
100Gbps Internet2 link spans US (16 June 2007)
http://www.theregister.co.uk/2007/06/16/internet2_spans_us/
Siemens shows 1Gbit/s over plastic fibre (5 June 2007)
http://www.theregister.co.uk/2007/06/05/siemens_gig_pof/
Cisco and RSA work on recipe for SAN encryption (23 May 2007)
http://www.theregister.co.uk/2007/05/23/cisco_rsa_combine_products/
Quantum crypto backdoor closed (22 February 2007)
http://www.theregister.co.uk/2007/02/22/quantum_crypto_patch/
'World first' quantum computer set to debut next week (9 February 2007)
http://www.theregister.co.uk/2007/02/09/quantum_first_demo/
Japanese scientists cage light (21 December 2006)
http://www.theregister.co.uk/2006/12/21/japanese_light_trap/
QIT: quantum hope or quantum hype? (4 May 2006)
http://www.theregister.co.uk/2006/05/04/quanutm_analysis/
NEC touts quantum crypto advances (2 June 2005)
http://www.theregister.co.uk/2005/06/02/nec_quantum_crypto/
Quantum crypto moves out of the lab (28 April 2005)
http://www.theregister.co.uk/2005/04/28/quantum_crypto/
Quantum crypto comes to Blighty (29 March 2005)
http://www.theregister.co.uk/2005/03/29/quantum_crypto/
Quantum Crypto – It's in the fiber (19 June 2003)
http://www.theregister.co.uk/2003/06/19/quantum_crypto_its/
Holy Grail of crypto to arrive in three years, say UK boffins (6 June 2003)
http://www.theregister.co.uk/2003/06/06/holy_grail_of_crypto/
Quantum crypto edges closer (14 December 2001)
http://www.theregister.co.uk/2001/12/14/quantum_crypto_edges_closer/
Quantum crypto one step closer (11 January 2001)
http://www.theregister.co.uk/2001/01/11/quantum_crypto_one_step_closer/
Boffins unveil world's most powerful quantum computer (15 August 2000)
http://www.theregister.co.uk/2000/08/15/boffins_unveil_worlds_most_powerful/
© Copyright 2008
