Believe it or not, there is equipment that can pick up tempest signals, up
to 200 metres away.  So it would all depend on the type of information.  If
you strongly believe the information is paramount to national security or
something then I would suggest building a faraday cage around you
establishment for starters, then going on to make sure phone lines are not
placed within 2 meters of data cables, etc.

The bottom line is if someone wants the information bad enough, they will
get it, for the attacker it comes down to "is it worth the effort getting
that information".  The question, for you, is how hard are you going to make
it for them to get that information?

I agree with Bill Perch, in that, the person wanting the information has to
have found out in the first place that there is information to get.  This
means that security procedures prior to the transmission of the information
have either been breeched or are lax.  So the first thing to do is tighten
up on the physical and procedural security.

Just my 2 pennys worth

Mike Graham

----- Original Message -----
From: "William Pearch" 
To: 
Sent: Saturday, June 15, 2002 4:02 AM
Subject: RE: Cryptography and frame-relay [7:46621]


> For the medical traffic that we are throwing over frame, hospitals are
> choosing to IPSec encrypt more and more.  Is it necessary?  I think it
> will be due to HIPPA, but that may or may not play out long run.  Will
> it protect your data?  Only from people that have the ability to
> intercept C-band satalite or tap fiber and don't want to walk into the
> doctors office and just photocopy your records... :)  Remember, End to
> End security doesn't stop at the routers.
> If your physical security measures are lax, and your security processes
> are non-existant, you are wasting your time in securing the transport
> between locations.  Pick off the low hanging fruit first.
>
> TTFN,
> Bill
>
>
> -----Original Message-----
> From: Paulo Roque [mailto:[EMAIL PROTECTED]]
> Sent: Friday, June 14, 2002 11:23 AM
> To: [EMAIL PROTECTED]
> Subject: Cryptography and frame-relay [7:46621]
>
>
> Hi All,
>
> Is necessary to encrypt the comunication that goes over frame-relay
> links or the frame-relay virtual circuits (PVC/SVC)  mechanisms are
> secure enough to protect my data?
>
> Thanks
>
> ------------------------------------------------------------------------
> --
> Eng. Paulo Roque
> Network Engineer
> Cisco Certified Network Associate
> [EMAIL PROTECTED]
>
> [GroupStudy.com removed an attachment of type
application/x-pkcs7-signature
> which had a name of smime.p7s]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=46681&t=46621
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to