Re: [PEN-TEST] Penetration Testing and Van Eck Scanning

[David Alexander <dalexander () TRISKELE CO UK>]

I have never done it, but I have seen the results, it shows legible text.
Ross Anderson at Cambridge University has produced a set of word processing
software that can defeat V-E scanning using software only. What you see on
the screen is not what you see in the van - it's unintelligible. I don't
know how it works and I have no idea if anyone is picking up on it
commercially.

Regards

David Alexander
Project Manager & Information Security Consultant
Qualified BS7799 Lead Auditor
Triskele Ltd.

Office  01491 833280
Mobile 0780 308 3130


> -----Original Message-----
> From: Johann van Duyn [mailto:johann.vanduyn () APPLETON COM]
> Sent: 08 November 2000 15:45
> To: PEN-TEST () SECURITYFOCUS COM
> Subject: [PEN-TEST] Penetration Testing and Van Eck Scanning
>
>
> Just a thought I had while on a nicotine-and-caffeine break:
>
> Has anyone ever done a bit of Van Eck (aka TEMPEST)
> surveillance as part of
> a penetration test, just to show people what can be seen from
> a van in the
> corporate parking lot when the security attendant is on his
> lunch break?
> That could provide a few hot debates in boardrooms,
> especially if one were
> to tune in to the Internet browsing habits of a few senior
> directors...
>
> Has anyone done it, or had/seen it done (esp. outside of a military
> environment)? Are there any good references around re.
> proposed civilian
> standards for 'safety' from Van Eck scanning? And where would one look
> around either for people who do that type of surveillance, or
> the equipment
> to do that with.
>
> And, finally, if this is not the right forum for such
> discussions, could
> anyone in the know point me to such?
>
> Very ta,
>
> +----------------
> | Johann van Duyn BA, MCSE, BCP-ISS
> | Network Manager: The Appleton Group Ltd
> | johann.vanduyn () appleton com
> | tel. +27 21 7998026
> | cel. +27 82 4588472
> | fax. +27 21 7944677
> +----------------
>
> "Many that live deserve death. And some that die deserve
> life. Can you give
> it to them? Then do not be too eager to deal out judgement.
> For even the
> very wise cannot see all ends."
>                 -- Gandalf, in "Lord of the Rings" by JRR Tolkein
>
>
> ***The Appleton Group Ltd***
>
> This message, including any attachments, is intended only for
> the individual
> or institution to which it is addressed and may contain
> information that is
> privileged, confidential or prohibited from disclosure or
> unauthorized use.
> If the recipient of this transmission is not the intended
> recipient, you are
> hereby notified that any use, reproduction dissemination, copying,
> disclosure, modification, distribution and/or publication of
> this email
> message or any of its attachments other than by its intended
> recipient is
> strictly prohibited by the sender. If you have received this
> message in
> error, please notify The Appleton Group Ltd immediately at
> postmaster () appleton com and destroy the message and all
> copies thereof in
> your possession.
>
> ****************************