RE: Fiber optic vampire taps

In order to tap into a fiber line you have to break the sheath. The signal is entirely optic, if you don't break the sheath you can't even see the signal. However, even if someone does decide to break into it then they've got another problem, exactly how to do it, it's extremely difficult because any sort of tapping into the signal seriously degrades the link, that's if it doesn't go down entirely, and it would be immediately noticeable if someone was tapping into your fiber line.

-----Original Message-----

From: Nick Iglehart [mailto:nick@systemsecuritysolutions.com] Sent: Friday, December 20, 2002 3:41 PM
To: security-basics@securityfocus.com
Subject: Fiber optic vampire taps  

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I have a client who has a fiber optic line between two buildings. There is no physical security and so they are concerned about someone tapping into the fiber line and capturing data.

I read something a while back about tapping fiber optic lines without breaking the sheathing and now I can't seem to find anything but vague references to it. I have googled for hours and checked the sf archives with no luck. Anyone have any references to this? Any help is appreciated.

Nick

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>

iQA/AwUBPgOqcKq/UK5/FuEgEQJrawCgqX64DN0KqFv4h373stMEcU70vB8AoMZ3 9YU6ysv+TwubV0jkbfAJ3K5n
=LoN2
-----END PGP SIGNATURE-----
Received on Mon Dec 23 18:45:52 2002

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek