About private networks (Was Re: NYT covers China cyberthreat)
Alain Hebert
ahebert at pubnix.net
Wed Feb 20 18:14:27 UTC 2013
( Well I'm sure that there is a few hundrends of paper on this subject )
I have a few ideas but it involve:
.Dark Fiber;
. All devices at FIPS 140 level;
. Tonnes of resin;
. Wire mesh;
. Fiber DB monitoring;
. Cable Shield monitoring;
. Single Encryption Key injection for the FIPS 140 devices;
. Central Provisioning;
. Kill switch for suspected segments;
<add your own crazy ideas>
<etc>
<add more of your own crazy ideas>
And a private fab because it would not be a good idea to
sub-contract that to lets says... some Chinese outfit =D
TLDR: Feasable, hella costly.
PS:
http://spybusters.blogspot.ca/2010/11/fiber-optics-easier-to-wiretap-than.html
Enjoy this week end of the world news.
-----
Alain Hebert ahebert at pubnix.net
PubNIX Inc.
50 boul. St-Charles
P.O. Box 26770 Beaconsfield, Quebec H9W 6G7
Tel: 514-990-5911 http://www.pubnix.net Fax: 514-990-9443
More information about the NANOG
mailing list