DOCSLIB.ORG

Development of Surveillance Technology and Risk of Abuse of Economic Information

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Development of Surveillance Technology and Risk of Abuse of Economic Information ∋(9(/230(172)6859(,//∃1&( 7(&+12/2∗<∃1∋5,6.2)∃%86( 2)(&2120,&,1)250∃7,21 9ΡΟ 7ΚΗςΗΡΙΚΗΥΛΘΦΡΠΠΞΘΛΦΛΡΘς ,ΘΗΟΟΛϑΗΘΦΗ&20,17ΡΙΞΡΠ∆ΗΓΣΥΡΦΗςςΛΘϑΙΡΥΛΘΗΟΟΛϑΗΘΦΗΣΞΥΣΡςΗς ΡΙΛΘΗΥΦΗΣΗΓΕΥΡΓΕΘΓΠΞΟΛΟΘϑΞϑΗΟΗςΗΓΡΥΦΡΠΠΡΘΦΥΥΛΗΥ ς∴ςΗΠςΘΓΛςΣΣΟΛΦΕΛΟΛ∴Ρ&20,17ΥϑΗΛΘϑΘΓςΗΟΗΦΛΡΘ ΛΘΦΟΞΓΛΘϑςΣΗΗΦΚΥΗΦΡϑΘΛΛΡΘ :ΡΥΝΛΘϑΓΡΦΞΠΗΘΙΡΥΚΗ672∃3ΘΗΟ /Ξ[ΗΠΕΡΞΥϑ2ΦΡΕΗΥ 3(9ΡΟ &ΟΡϑΞΛΘϑΓ 7ΛΟΗ 3∆Υ7ΚΗςΗΡΙΚΗΥΛΘΦΡΠΠΞΘΛΦΛΡΘς ,ΘΗΟΟΛϑΗΘΦΗ&20,17ΡΙΞΡΠ∆ΗΓΣΥΡΦΗςςΛΘϑΙΡΥ ΛΘΗΟΟΛϑΗΘΦΗΣΞΥΣΡςΗςΡΙΛΘΗΥΦΗΣΗΓΕΥΡΓΕΘΓΞΟΛ ΟΘϑΞϑΗΟΗςΗΓΡΥΦΡΠΠΡΘΦΥΥΛΗΥς∴ςΗΠςΘΓΛς ΣΣΟΛΦΕΛΟΛ∴Ρ&20,17ΥϑΗΛΘϑΘΓςΗΟΗΦΛΡΘ ΛΘΦΟΞΓΛΘϑςΣΗΗΦΚΥΗΦΡϑΘΛΛΡΘ :ΡΥΝΣΟΘ5ΗΙ (3,9%672∃ 3ΞΕΟΛςΚΗΥ (ΞΥΡΣΗΘ3ΥΟΛΠΗΘ ∋ΛΥΗΦΡΥΗ∗ΗΘΗΥΟΙΡΥ5ΗςΗΥΦΚ ∋ΛΥΗΦΡΥΗ∃ 7ΚΗ672∃3ΥΡϑΥ∆ΠΠΗ ∃ΞΚΡΥ ∋ΞΘΦΘ&ΠΣΕΗΟΟ,379/ΩΓ(ΓΛΘΕΞΥϑΚ (ΓΛΡΥ 0Υ∋ΛΦΝ+2/∋6:257+ +ΗΓΡΙ672∃8ΘΛ ∋Η 2ΦΡΕΗΥ 3(ΘΞΠΕΗΥ 3(9ΡΟ 7ΚΛςΓΡΦΞΠΗΘΛςΖΡΥΝΛΘϑ∋ΡΦΞΠΗΘΙΡΥΚΗ672∃3ΘΗΟ,ΛςΘΡΘΡΙΙΛΦΛΟΣΞΕΟΛΦΛΡΘΡΙ672∃ 7ΚΛςΓΡΦΞΠΗΘΓΡΗςΘΡΘΗΦΗςςΥΛΟ∴ΥΗΣΥΗςΗΘΚΗΨΛΗΖςΡΙΚΗ(ΞΥΡΣΗΘ3ΥΟΛΠΗΘ I nterception Capabilities 2000 Report to the Director General for Research of the European Parliament (Scientific and Technical Options Assessment programme office) on the development of surveillance technology and risk of abuse of economic information. This study considers the state of the art in Communications intelligence (Comint) of automated processing for intelligence purposes of intercepted broadband multi-language leased or common carrier systems, and its applicability to Comint targeting and selection, including speech recognition. I nterception Capabilities 2000 Cont ent s SUMMARY .............................................................................................................................................................................................. A 1. ORGANISATIONS AND METHODS ................................................................................................................................................... 1 WHAT IS COMMUNICATIONS INTELLIGENCE? .................................................................................................................................. 1 UKUSA alliance .......................................................................................................................................................................... 1 Other Comint organisations ..................................................................................................................................................... 1 HOW INTELLIGENCE WORKS ............................................................................................................................................................. 1 Planning ....................................................................................................................................................................................... 2 Access and collection ................................................................................................................................................................. 2 Processing .................................................................................................................................................................................... 2 Production and dissemination ................................................................................................................................................. 3 2. INTERCEPTING INTERNATIONAL COMMUNICATIONS .................................................................................................................. 3 INTERNATIONAL LEASED CARRIER (ILC) COMMUNICATIONS .......................................................................................................... 3 High frequency radio ................................................................................................................................................................. 4 Microwave radio relay .............................................................................................................................................................. 4 Subsea cables .............................................................................................................................................................................. 4 Communications satellites ........................................................................................................................................................ 4 Communications techniques ..................................................................................................................................................... 4 ILC COMMUNICATIONS COLLECTION ................................................................................................................................................ 4 Access ............................................................................................................................................................................................ 4 Operation SHAMROCK ............................................................................................................................................................. 4 High frequency radio interception .......................................................................................................................................... 5 Space interception of inter-city networks .............................................................................................................................. 5 Sigint satellites ........................................................................................................................................................................... 6 COMSAT ILC collection ............................................................................................................................................................ 7 Submarine cable interception .................................................................................................................................................. 8 Intercepting the Internet ............................................................................................................................................................ 9 Covert collection of high capacity signals .......................................................................................................................... 10 New satellite networks ............................................................................................................................................................ 11 3. ECHELON AND COMINT PRODUCTION ...................................................................................................................................... 11 THE "WATCH LIST" ........................................................................................................................................................................ 11 NEW INFORMATION ABOUT ECHELON SITES AND SYSTEMS ....................................................................................................... 11 Westminster, London – Dictionary computer ....................................................................................................................... 12 Sugar Grove, Virginia – COMSAT interception at ECHELON site ................................................................................. 12 Sabana Seca, Puerto Rico and Leitrim, Canada – COMSAT interception sites ........................................................... 13 Waihopai, New Zealand – Intelsat interception at ECHELON site ................................................................................. 13 ILC PROCESSING TECHNIQUES ........................................................................................................................................................ 13 4. COMINT AND LAW ENFORCEMENT ............................................................................................................................................. 13 MISREPRESENTATION OF LAW ENFORCEMENT INTERCEPTION REQUIREMENTS ........................................................................... 14 Law enforcement communications interception – policy development in Europe ....................................................... 15 5. COMINT AND ECONOMIC INTELLIGENCE ................................................................................................................................... 15 TASKING ECONOMIC INTELLIGENCE ................................................................................................................................................ 15 DISSEMINATING ECONOMIC INTELLIGENCE .................................................................................................................................... 16 THE USE OF COMINT ECONOMIC INTELLIGENCE PRODUCT ............................................................................................................. 16 Panavia European Fighter Aircraft consortium and Saudi Arabia ................................................................................ 16 Thomson CSF and Brazil ........................................................................................................................................................ 17 Airbus Industrie and Saudi Arabia ....................................................................................................................................... 17 International trade negotiations .........................................................................................................................................
Load more

Recommended publications
  • Dialectical Versus Empirical Thinking: Ten Key Elements of the Russian Understanding of Information Operations
    WARNING! The views expressed in FMSO publications and reports are those of the authors and do not necessarily represent the official policy or position of the Department of the Army, Department of Defense, or the U.S. Government. Dialectical Versus Empirical Thinking: Ten Key Elements of the Russian Understanding of Information Operations CALL Publication #98-21 by Mr. Thimothy L. Thomas Foreign Military Studies Office, Fort Leavenworth, KS. This article was previously published in The Journal of Slavic Military Studies, Vol. 11, No 1 (March 1998), pp. 40-62. and Conflict Studies Research Centre, RMA Sandhurst, England, July 1997, Report AA29 Introduction Finding similarities in the Russian and U.S. approaches to information operations (IO) is not a difficult task. Both countries' specialists closely study electronic warfare and command and control systems of other countries, and both stress the importance of the use of computers and information management in the preparation and conduct of modern combat operations. This includes the use of information to conduct psychological operations (PSYOP). Upon closer examination, however, the Russian approach to the information warfare (IW) aspect of IO has several elements that makes it unique and different. There are three principal reasons for the distinct Russian method. First, there is the issue of overall context. The Russian state, economy, and society are in a transition period resulting in institutional and philosophical instability. Russian mass consciousness, according to many prominent scientists and government officials, is vulnerable to manipulation by slick marketing campaigns and to exploitation by promises of economic and social prosperity during this transition period.
    [Show full text]
  • Identify GEO Objects #5
    Identification of UI Objects in Classification of Geosynchronous Objects Issue 11 Ted Molczan 2010 Jan 31 Revision 2, 2010 Feb 02 Abstract Sixty-seven (67) objects reported as unidentified in Classification of Geosynchronous Objects, Issue 11, have been newly correlated with launches, and identified as a specific piece from their launch. Corrections of 5 previous independent identifications are proposed. This increases the total number of identified objects to 140, out of 152 originally reported as unidentified. 1. Introduction The European Space Agency’s European Space Operations Centre reports annually on the status of objects in geosynchronous orbit, via the Classification of Geosynchronous Objects (COGO) series, produced by the Space Debris Office of the Ground Systems Engineering Department. COGO Issue 11, Section 4.7, reports 152 objects tracked by the International Scientific Optical Network (ISON), classified as unidentified, because they could not initially be correlated with a specific launch. They receive permanent IDs of the form UI.nnn, in which UI denotes unidentified, and nnn is a serial number. Objects that are eventually correlated to launches retain their UI designation, but are also listed in Section 4.7 with their COSPAR designation. The launches expected to account for most of the 152 UI objects are the 77 which placed a total of 153 officially catalogued objects into geosynchronous orbit, for which orbital elements are not available from official sources. COGO Issue 11, identifies 40 objects that had been correlated with their launches, and independent researchers have correlated an additional 33 objects. All belong to the 77 known launches. The present study originates within the small community of hobbyists who observe objects in orbits for which official orbital elements are not available, and analyze their orbits, optical characteristics and radio transmissions.
    [Show full text]
  • Smithsonian Institution Archives (SIA)
    SMITHSONIAN OPPORTUNITIES FOR RESEARCH AND STUDY 2020 Office of Fellowships and Internships Smithsonian Institution Washington, DC The Smithsonian Opportunities for Research and Study Guide Can be Found Online at http://www.smithsonianofi.com/sors-introduction/ Version 2.0 (Updated January 2020) Copyright © 2020 by Smithsonian Institution Table of Contents Table of Contents .................................................................................................................................................................................................. 1 How to Use This Book .......................................................................................................................................................................................... 1 Anacostia Community Museum (ACM) ........................................................................................................................................................ 2 Archives of American Art (AAA) ....................................................................................................................................................................... 4 Asian Pacific American Center (APAC) .......................................................................................................................................................... 6 Center for Folklife and Cultural Heritage (CFCH) ...................................................................................................................................... 7 Cooper-Hewitt,
    [Show full text]
  • Threat Defense: Cyber Deception Approach and Education for Resilience in Hybrid Threats Model
    S S symmetry Article Threat Defense: Cyber Deception Approach and Education for Resilience in Hybrid Threats Model William Steingartner 1,* , Darko Galinec 2 and Andrija Kozina 3 1 Faculty of Electrical Engineering and Informatics, Technical University of Košice, Letná 9, 042 00 Košice, Slovakia 2 Department of Informatics and Computing, Zagreb University of Applied Sciences, Vrbik 8, 10000 Zagreb, Croatia; [email protected] 3 Dr. Franjo Tudman¯ Croatian Defence Academy, 256b Ilica Street, 10000 Zagreb, Croatia; [email protected] * Correspondence: [email protected] Abstract: This paper aims to explore the cyber-deception-based approach and to design a novel conceptual model of hybrid threats that includes deception methods. Security programs primarily focus on prevention-based strategies aimed at stopping attackers from getting into the network. These programs attempt to use hardened perimeters and endpoint defenses by recognizing and blocking malicious activities to detect and stop attackers before they can get in. Most organizations implement such a strategy by fortifying their networks with defense-in-depth through layered prevention controls. Detection controls are usually placed to augment prevention at the perimeter, and not as consistently deployed for in-network threat detection. This architecture leaves detection gaps that are difficult to fill with existing security controls not specifically designed for that role. Rather than using prevention alone, a strategy that attackers have consistently succeeded against, defenders Citation: Steingartner, W.; are adopting a more balanced strategy that includes detection and response. Most organizations Galinec, D.; Kozina, A. Threat Defense: Cyber Deception Approach deploy an intrusion detection system (IDS) or next-generation firewall that picks up known attacks and Education for Resilience in or attempts to pattern match for identification.
    [Show full text]
  • Air Force Glossary
    AIR FORCE GLOSSARY Air Force Doctrine Document 1-2 11 January 2007 This document supplements the terminology in Joint Publication 1-02, Department of Defense Dictionary of Military and Associated Terms ACCESSIBILITY: Publications are available on the e-Publishing website at www.e-publishing.af.mil for downloading. RELEASABILITY: There are no releasability restrictions on this publication BY ORDER OF THE AIR FORCE DOCTRINE DOCUMENT 1-2 SECRETARY OF THE AIR FORCE 11 JANUARY 2007 NOTICE: This publication is available on the AFDPO WWW site at http://www.e-publishing.af.mil SUMMARY OF CHANGES Since the 8 June 2006 version the following publications have been revised or developed: AFDD 2 Operations and Organization, AFDD 2-2 Space Operations, AFDD 2-1.3 Counterland Operations, and AFDD 2-1.9 Targeting. NOTE: The Air Force Glossary is accessible on-line at https://www.doctrine.af.mil/Main.asp (fourth selection from bottom left). As terminology changes are published in doctrine they are added to the internet version, making the internet version of the Air Force Glossary more up-to- date. Supersedes: AFDD 1-2, 8 June 2006 OPR: HQ AFDC/DD Certified by: HQ AFDC/DD (Col Jon Wolfe) Pages: 77 Accessibility: Available on the e-publishing website at www.e-publishing.af.mil for downloading Releasability: There are no releasability restrictions on this publication Approved by: Allen G. Peck, Major General, USAF Commander, Air Force Doctrine Center FOREWORD Warfighters require a common lexicon of unique military terms essential to explaining, understanding, and writing doctrine. This common lexicon, reached by familiar definitions, is fundamental to conducting efficient and effective air, space, and cyberspace operations.
    [Show full text]
  • The CIA Rigged Foreign Spy Devices for Years. What Secrets Should It Share
    The CIA rigged foreign spy devices for years. What secrets shouldnow/2020/02/28/b570a4ea-58ce-11ea-9000-f3cffee23036_story.html it share now? By Peter Kornbluh/ senior analyst at the National Security Archive, a nonprofit research center in Washington that advocates for declassification and freedom of information/ Twitter: @peterkornbluh February 28, 2020 The revelation that the CIA secretly co-owned the world’s leading manufacturer of encryption machines, and rigged those devices to conduct espionage on more than 100 nations that purchased them for more than half a century, has generated a number of historical and ethical questions: What did U.S. officials know, and when did they know it, about key episodes in recent world history? How did U.S. policymakers act on the intelligence that was gathered? Did U.S. officials have an obligation, as The Washington Post’s Greg Miller put it, to “expose or stop human rights violations unfolding in their view”? Should the United States have been spying on friends and foes alike? But the most immediate question has yet to be answered: What should the United States do with the massive trove of intercepted communications it obtained and decrypted, along with the thousands of secret intelligence reports those intercepts generated? Those files are gathering dust in the SCIFs — the sensitive compartmented information facilities — of the CIA and the National Security Agency. Hidden away, the documents represent a history held hostage; they have the potential to significantly advance the historical record, not only on U.S. foreign policy but on key world crises and events (wars, coups, terrorist attacks, peace accords) over more than five decades.
    [Show full text]
  • Inside Russia's Intelligence Agencies
    EUROPEAN COUNCIL ON FOREIGN BRIEF POLICY RELATIONS ecfr.eu PUTIN’S HYDRA: INSIDE RUSSIA’S INTELLIGENCE SERVICES Mark Galeotti For his birthday in 2014, Russian President Vladimir Putin was treated to an exhibition of faux Greek friezes showing SUMMARY him in the guise of Hercules. In one, he was slaying the • Russia’s intelligence agencies are engaged in an “hydra of sanctions”.1 active and aggressive campaign in support of the Kremlin’s wider geopolitical agenda. The image of the hydra – a voracious and vicious multi- headed beast, guided by a single mind, and which grows • As well as espionage, Moscow’s “special services” new heads as soon as one is lopped off – crops up frequently conduct active measures aimed at subverting in discussions of Russia’s intelligence and security services. and destabilising European governments, Murdered dissident Alexander Litvinenko and his co-author operations in support of Russian economic Yuri Felshtinsky wrote of the way “the old KGB, like some interests, and attacks on political enemies. multi-headed hydra, split into four new structures” after 1991.2 More recently, a British counterintelligence officer • Moscow has developed an array of overlapping described Russia’s Foreign Intelligence Service (SVR) as and competitive security and spy services. The a hydra because of the way that, for every plot foiled or aim is to encourage risk-taking and multiple operative expelled, more quickly appear. sources, but it also leads to turf wars and a tendency to play to Kremlin prejudices. The West finds itself in a new “hot peace” in which many consider Russia not just as an irritant or challenge, but • While much useful intelligence is collected, as an outright threat.
    [Show full text]
  • The Siloviki in Russian Politics
    The Siloviki in Russian Politics Andrei Soldatov and Michael Rochlitz Who holds power and makes political decisions in contemporary Russia? A brief survey of available literature in any well-stocked bookshop in the US or Europe will quickly lead one to the answer: Putin and the “siloviki” (see e.g. LeVine 2009; Soldatov and Borogan 2010; Harding 2011; Felshtinsky and Pribylovsky 2012; Lucas 2012, 2014 or Dawisha 2014). Sila in Russian means force, and the siloviki are the members of Russia’s so called “force ministries”—those state agencies that are authorized to use violence to respond to threats to national security. These armed agents are often portrayed—by journalists and scholars alike—as Russia’s true rulers. A conventional wisdom has emerged about their rise to dominance, which goes roughly as follows. After taking office in 2000, Putin reconsolidated the security services and then gradually placed his former associates from the KGB and FSB in key positions across the country (Petrov 2002; Kryshtanovskaya and White 2003, 2009). Over the years, this group managed to disable almost all competing sources of power and control. United by a common identity, a shared worldview, and a deep personal loyalty to Putin, the siloviki constitute a cohesive corporation, which has entrenched itself at the heart of Russian politics. Accountable to no one but the president himself, they are the driving force behind increasingly authoritarian policies at home (Illarionov 2009; Roxburgh 2013; Kasparov 2015), an aggressive foreign policy (Lucas 2014), and high levels of state predation and corruption (Dawisha 2014). While this interpretation contains elements of truth, we argue that it provides only a partial and sometimes misleading and exaggerated picture of the siloviki’s actual role.
    [Show full text]
  • Trend Micro Incorporated Research Paper 2012
    Trend Micro Incorporated Research Paper 2012 Detecting APT Activity with Network Traffic Analysis Nart Villeneuve and James Bennett Contents About This Paper .................................................................................................................................. 1 Introduction ........................................................................................................................................... 1 Detecting Remote Access Trojans ................................................................................................... 3 GhostNet......................................................................................................................................... 3 Nitro and RSA Breach .................................................................................................................4 Detecting Ongoing Campaigns .........................................................................................................5 Taidoor ............................................................................................................................................5 IXESHE ............................................................................................................................................5 Enfal aka Lurid ..............................................................................................................................6 Sykipot ...........................................................................................................................................
    [Show full text]
  • Hagelin) by Williaj-1 F
    .. REF ID :A2436259 Declassified and approved for release by NSA on 07-22 2014 pursuant to E.O. 1352e REF ID:A2436259 '!'UP SECRE'l' REPORT"OF.VISIT 1Q. CRYPTO A.G. (HAGELIN) BY WILLIAJ-1 F. FRIEDI.W.if SPECIAL ASSISTANT TO THE DIRECTOR, NATIONAL SECURITY AGENCY 21 - 28 FEBRUARY 1955 ------------------ I -:-· INTRO:bUCTIOI~ 1. In accordance with Letter Orders 273 dated 27 January 1955, as modified by L.0.273-A dated~ February 1955, I left Washington via MATS at 1500 houri' on 18 'February 1955, arrived at Orly Field, Pe,ris, at 1430 hours on 19 February, ' • • f • I ' -,-:--,I." -'\ iII ~ ~ ,.oo4 • ,. ,.. \ • .... a .. ''I •:,., I I .arid at Zug, Switzerland, at 1830 the same day. I sp~~~ th~· ~e~t .few da;s· ~ Boris Hagelin, Junior, for the purpose of learning the status of their new deyelop- ' ments in crypto-apparatus and of makifie an approach and a proposal to Mr. Hagelin S~, 1 / as was recently authorized by.USCIB and concurred in by LSIB. ~ Upon completion of that part of my mission, I left Zug at 1400 hours on ··'··· 28 February and proceeded by atrb-eme:Bfle to Zll:N:ch, ·1.'fteu~ I l3e-a.d:ee: a s~f3:es ah3::i:nMP plE.t;i~ie to London, arriving i:n mndo-l't' at 1845 that evening, f;the schedu1 ed p1anli ed 2_. The following report is based upon notes made of the subste.nce of several talks with the Hagel~ns, at times in separate meetings with each of them and at other times in meetings with both of them.
    [Show full text]
  • Trend Analysis the Israeli Unit 8200 an OSINT-Based Study CSS
    CSS CYBER DEFENSE PROJECT Trend Analysis The Israeli Unit 8200 An OSINT-based study Zürich, December 2019 Risk and Resilience Team Center for Security Studies (CSS), ETH Zürich Trend analysis: The Israeli Unit 8200 – An OSINT-based study Author: Sean Cordey © 2019 Center for Security Studies (CSS), ETH Zurich Contact: Center for Security Studies Haldeneggsteig 4 ETH Zurich CH-8092 Zurich Switzerland Tel.: +41-44-632 40 25 [email protected] www.css.ethz.ch Analysis prepared by: Center for Security Studies (CSS), ETH Zurich ETH-CSS project management: Tim Prior, Head of the Risk and Resilience Research Group, Myriam Dunn Cavelty, Deputy Head for Research and Teaching; Andreas Wenger, Director of the CSS Disclaimer: The opinions presented in this study exclusively reflect the authors’ views. Please cite as: Cordey, S. (2019). Trend Analysis: The Israeli Unit 8200 – An OSINT-based study. Center for Security Studies (CSS), ETH Zürich. 1 Trend analysis: The Israeli Unit 8200 – An OSINT-based study . Table of Contents 1 Introduction 4 2 Historical Background 5 2.1 Pre-independence intelligence units 5 2.2 Post-independence unit: former capabilities, missions, mandate and techniques 5 2.3 The Yom Kippur War and its consequences 6 3 Operational Background 8 3.1 Unit mandate, activities and capabilities 8 3.2 Attributed and alleged operations 8 3.3 International efforts and cooperation 9 4 Organizational and Cultural Background 10 4.1 Organizational structure 10 Structure and sub-units 10 Infrastructure 11 4.2 Selection and training process 12 Attractiveness and motivation 12 Screening process 12 Selection process 13 Training process 13 Service, reserve and alumni 14 4.3 Internal culture 14 5 Discussion and Analysis 16 5.1 Strengths 16 5.2 Weaknesses 17 6 Conclusion and Recommendations 18 7 Glossary 20 8 Abbreviations 20 9 Bibliography 21 2 Trend analysis: The Israeli Unit 8200 – An OSINT-based study selection tests comprise a psychometric test, rigorous Executive Summary interviews, and an education/skills test.
    [Show full text]
  • Introducing Traffic Analysis
    Introducing Traffic Analysis George Danezis and Richard Clayton January 26, 2007 1 Introduction In the Second World War, traffic analysis was used by the British at Bletchley Park to assess the size of Germany's air-force, and Japanese traffic analysis countermeasures contributed to the surprise of their 1941 attack on Pearl Harbour. Nowadays, Google uses the incidence of links to assess the relative importance of web pages, credit card companies examine transactions to spot fraudulent patterns of spending, and amateur plane-spotters revealed the CIA's `extraordinary rendition' programme. Diffie and Landau, in their book on wiretapping, went so far as to say that “traffic analysis, not cryptanalysis, is the backbone of communications intelligence" [1]. However, until recently the topic has been neglected by Computer Science academics. A rich literature discusses how to secure the confidentiality, integrity and availability of communication content, but very little work has considered the information leaked from communications ‘traffic data' and how these compromises might be minimised. Traffic data records the time and duration of a communication, and traffic analysis examines this data to determine the detailed shape of the communication streams, the identities of the parties communicating, and what can be established about their locations. The data may even be sketchy or incomplete { simply knowing what `typical' communication patterns look like can be used to infer information about a particular observed communication. Civilian infrastructures, on which state and economic actors are increasingly reliant, are ever more vulnerable to traffic analysis: wireless and GSM telephony are replacing traditional systems, routing is transparent and protocols are overlaid over others { giving plenty of opportunity to observe, and take advantage of the traffic data.
    [Show full text]