RE: Fiber optic vampire taps

["Hornat, Charles" <Charles_Hornat () standardandpoors com>]

This is not true.  The US Navy did this to the Russians a few years
back.

http://www.bizjournals.com/philadelphia/stories/2002/07/29/newscolumn2.h
tml

I don't recall what this method was called back then though, it wasn't
"clips".

Charles



-----Original Message-----
From: Alvey Robert W KPWA [mailto:AlveyRW () kpt nuwc navy mil] 
Sent: Monday, December 23, 2002 5:48 PM
To: 'nick () systemsecuritysolutions com';
security-basics () securityfocus com
Subject: RE: Fiber optic vampire taps

In order to tap into a fiber line you have to break the sheath.  The
signal
is entirely optic, if you don't break the sheath you can't even see the
signal.  However, even if someone does decide to break into it then
they've
got another problem, exactly how to do it, it's extremely difficult
because
any sort of tapping into the signal seriously degrades the link, that's
if
it doesn't go down entirely, and it would be immediately noticeable if
someone was tapping into your fiber line.

-----Original Message-----
From: Nick Iglehart [mailto:nick () systemsecuritysolutions com] 
Sent: Friday, December 20, 2002 3:41 PM
To: security-basics () securityfocus com
Subject: Fiber optic vampire taps


 
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I have a client who has a fiber optic line between two buildings. 
There is no physical security and so they are concerned about someone
tapping into the fiber line and capturing data.  

I read something a while back about tapping fiber optic lines without
breaking the sheathing and now I can't seem to find anything but vague
references to it.  I have googled for hours and checked the sf archives
with
no luck.  Anyone have any references to this?  Any help is appreciated.

Nick

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>

iQA/AwUBPgOqcKq/UK5/FuEgEQJrawCgqX64DN0KqFv4h373stMEcU70vB8AoMZ3
9YU6ysv+TwubV0jkbfAJ3K5n
=LoN2
-----END PGP SIGNATURE-----
 
 
 
--------------------------------------------------------

 
The information contained in this message is intended only for the recipient, and may be a confidential attorney-client 
communication or may otherwise be privileged and confidential and protected from disclosure. If the reader of this 
message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended 
recipient, please be aware that any dissemination or copying of this communication is strictly prohibited. If you have 
received this communication in error, please immediately notify us by replying to the message and deleting it from your 
computer. 
 
Thank you, 
 
Standard & Poor's
 
--------------------------------------------------------