[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: Sampled Traffic Analysis by Internet-Exchange-Level Adversaries

To: or-talk@xxxxxxxxxxxxx
Subject: Re: Sampled Traffic Analysis by Internet-Exchange-Level Adversaries
From: coderman <coderman@xxxxxxxxx>
Date: Mon, 28 May 2007 03:47:22 -0700
Delivered-to: archiver@xxxxxxxx
Delivered-to: or-talk-outgoing@xxxxxxxx
Delivered-to: or-talk@xxxxxxxx
Delivery-date: Mon, 28 May 2007 06:47:31 -0400
Dkim-signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=iHocKVbKiz77un8N6aj+o12+MR6SlQTSe8TVZ0SW5Yqy1DXbgpWKMxUpg78Rs7pQxe9CUvT2UgG/N0SCYN17fzUPCWcHiYrOxv6KQx3fwvY9S7gMgHy+kWYkdwafYJY0kXvNGkW/vfH4k24X5ZuCwaFRt3xQmiRfwou5R2qltcg=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=Yvf9hcHVudbfpY4+UFZuz9UBkaRVyO8YZVmq8WXyWA/il8Xr6XVIzf9/gT3dx8nIWsQR7zu7wbPViwyuI/qkBPwvCSq1sxb86eFjjqa0+Ifho1xhUXVLW0NT6unEA2adHHZHlUcuEN8YVs/hNvjRkqidlJvMpTfStp97mDzkiXM=
In-reply-to: <4ef5fec60705280336l41a7a0c0xc27995c0a0a74f46@xxxxxxxxxxxxxx>
References: <20070528100048.GS7967@xxxxxxxxxxxxxxxxx> <4ef5fec60705280336l41a7a0c0xc27995c0a0a74f46@xxxxxxxxxxxxxx>
Reply-to: or-talk@xxxxxxxxxxxxx
Sender: owner-or-talk@xxxxxxxxxxxxx

On 5/28/07, coderman <coderman@xxxxxxxxx> wrote:

... is the assumption that inspection at
OC/WDM layers is too cumbersome/expensive for all but the previously
mentioned TLA/$gov adversaries?


one more comment that ties into your mention PCIe bus limitations.
previous research on monitoring high speeds links has shown FPGA
devices well suited for header and deep packet inspect at line rates
up to 10GigE for hundreds of snort style  filter rules. this approach
scales in a linear fashion.

i'll try to find some of the papers on this subject; i don't have them
on hand.  coincidentally, many of those involved in such projects seem
to get sucked into the proprietary/classified commercial and
government sectors. *grin*

it's turtles, all the way down...

References:
- Sampled Traffic Analysis by Internet-Exchange-Level Adversaries
  - From: Steven Murdoch
- Re: Sampled Traffic Analysis by Internet-Exchange-Level Adversaries
  - From: coderman

Prev by Author: Re: Sampled Traffic Analysis by Internet-Exchange-Level Adversaries
Next by Author: Re: Sampled Traffic Analysis by Internet-Exchange-Level Adversaries
Previous by thread: Re: Sampled Traffic Analysis by Internet-Exchange-Level Adversaries
Next by thread: Re: Sampled Traffic Analysis by Internet-Exchange-Level Adversaries
Index(es):
- Author
- Thread