Re: ISPs and full packet inspection

[Patrick Darden <darden () armc org>]

0.  General Reference 
http://en.wikipedia.org/wiki/Deep_packet_inspection#DPI_at_network.2FInternet_service_providers  
e.g. Lawful Intercept

1.  network neutrality -- lots of possible laws coming up, 
http://en.wikipedia.org/wiki/Network_neutrality#Law_in_the_United_States  http://www.sans.org/reading_room/whitepapers/policyissues/net-neutrality-rest-peace_33809

2.  intellectual property -- all the sopa/pipa/etc. specifically privacy 
invasion 
http://en.wikipedia.org/wiki/Stop_Online_Piracy_Act#Deep-packet_inspection_and_privacy

3.  principle of implied responsibility -- if you change a data stream, 
it is implied you are responsible for it (i.e. administratively, 
editorially, etc.)

4.  Check out the CISSP legal domain.  Especially resources and 
references for it.  Someone on your team should have this 
certification.  
http://www.amazon.com/CISSP-Boxed-Set-All---One/dp/0071768459/ref=sr_1_1?ie=UTF8&qid=1337865477&sr=8-1

5.  The EFF might be able to help you.  WRT Privacy espec.

6.  SANS has tons of references.  www.sans.org

7.  Get with a lawyer who is network-aware.  Good luck with that.  Maybe 
try to find a lawyer with a CISSP cert?

--Patrick Darden


On 05/24/2012 08:50 AM, not common wrote:
> Hello,
>
> I am looking for some guidance on full packet inspection at the ISP level.
>
> Is there any regulations that prohibit or provide guidance on this?