Follow Us

We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message

Optical nets easier to hack than copper

Fibre optics need crypto too, argues Swiss crypto developer.

Article comments

Optical fibre is a lot easier to tap than most people imagine. There is no need to break or splice the fibre now - a relatively shallow bend can be enough.

The technique works because the light in the cable propagates by bouncing off the insides of the fibre. Unsheath the cable, and a detector can pick up the tiny amount of light that escapes through the fibre's coating, explained Thomas Meier, the CEO of Swiss company Infoguard.

He demonstrated the technique on a fibre carrying a VoIP phone call over Gigabit Ethernet. A section of fibre from inside a junction box was looped into a photodetector called a bend coupler, and the call was recorded and then played back on a laptop.

"People claim optical fibre is harder to tap than copper, but the opposite is true - you don't even have to break the insulation, as you would with copper," Meier said. "You can read through the fibre's cladding with as little as half a dB signal loss."

He claimed that suitable bend couplers can be bought off the shelf - or from eBay - for a few hundred dollars, and connected to the extra fibre that is typically left coiled up in junctions boxes for future splicing needs.

The demo was to promote Infoguard's encryption devices which it said are 10Gig-capable with a latency of just 5us. The Eur 29,000 (£20,000) boxes encrypt at the network level, Layer 1, so are suitable for point-to-point links only, but Meier said that it means they can encode any protocol, not just IP.

He added that the risk is not imaginary or theoretical - optical taps have been found on police networks in the Netherlands and Germany, and the FBI investigated one discovered on Verizon's network in the US. Networks used by UK and French pharmaceutical companies have also been attacked, probably for industrial espionage, he said.



Share:

More from Techworld

More relevant IT news

Comments

Charles Smith said: I saw this demo at Infosec 2007 in London and it is quite convincing though it would need a powerful sniffer to deal with a loaded data fibre Their encryption boxes are built in Switzerland so their equipment is less likely to contain backdoors or master keyed encryption Though Im sure that our security services would never stoop to such low tricks



Send to a friend

Email this article to a friend or colleague:

PLEASE NOTE: Your name is used only to let the recipient know who sent the story, and in case of transmission error. Both your name and the recipient's name and address will not be used for any other purpose.

Techworld White Papers

Choose – and Choose Wisely – the Right MSP for Your SMB

End users need a technology partner that provides transparency, enables productivity, delivers...

Download Whitepaper

10 Effective Habits of Indispensable IT Departments

It’s no secret that responsibilities are growing while budgets continue to shrink. Download this...

Download Whitepaper

Gartner Magic Quadrant for Enterprise Information Archiving

Enterprise information archiving is contributing to organisational needs for e-discovery and...

Download Whitepaper

Advancing the state of virtualised backups

Dell Software’s vRanger is a veteran of the virtualisation specific backup market. It was the...

Download Whitepaper

Techworld UK - Technology - Business

Innovation, productivity, agility and profit

Watch this on demand webinar which explores IT innovation, managed print services and business agility.

Techworld Mobile Site

Access Techworld's content on the move

Get the latest news, product reviews and downloads on your mobile device with Techworld's mobile site.

Find out more...

From Wow to How : Making mobile and cloud work for you

On demand Biztech Briefing - Learn how to effectively deliver mobile work styles and cloud services together.

Watch now...

Site Map

* *