"Clive" wrote
> > Not an answer, but I'm looking at a fibre network as part of a new house
> that I am building.
>
> Is Fibre more secure than copper? What do the MOD/Security agencies use
for
> their 'secure' networks.
>
> I once heard a story that a fibre network was 'hacked' using mirrors? Is
> this possible?
>
> Clive
>
>
Hi Clive,
The MOD normally use fibre within sites, as it's a *lot* more secure than
copper - even shielded cat-5 (STP) radiates a signal which can be received
with the right hardware. This generally applies to anything that isn't
Tempest RFI qualified. Outside sites, the military/etc tend to use strong
encryption (essentially stream-cyphers with very long keys generated by
synchronised hardware at both ends of a link) whatever the actual
transmission medium - which could be a dedicated dark fibre, an ATM 155 Mbit
circuit, an E1/E3 or a satellite link, quite often with error-correction
coding applied to the cypherstream.
Fibre *can* be tapped, e.g. by bending and causing light to leave the core
and exit the fibre surface, this results in an additional loss over the
length of the circuit: I dunno about what the MOD uses (been out of all that
for too long now), but the banks, civilian "security" organisations etc
using DWDM (Dense Wavelength Division Multiplex) links (a number of
independent lasers at different wavelengths in the same fibre, each
transmitting a separate data stream) normally have optical link monitoring
to trigger an alarn should the fibre loss suddenly increase (either due to
an attempted security breach or physical damage to the circuit)
Many of the ISP's and carriers use DWDM for their national rings, with
wavelengths carrying (for instance) 10 Gbit SDH (Synchronous Data Heirarchy)
signals between regional offices for telephone traffic etc, others carrying
10Gbit Ethernet, still others with digital video via ATM (Asynchronous
Transfer Mode).
DWDM for medium-haul is getting increasingly popular, e.g. BT's Wavestream
Connect service, as the independent channels are totally isolated from each
other and the management platform, hence pretty secure end-to-end, and allow
existing fibre plant to carry very large amounts of data (the Adva FSP
currently used by BT can at the moment run up to 80 Gigabits over 32 2.5G
channels, and will probably ramp up to 32 10G channels in the mid-term
future, over distances up to around 50Km without intermediate hardware).
For short-haul (within a building, for instance) fibre is a little more
costly that cat-5 and more hassle to install, but does eliminate the
possibility of RFI to the network or other equipment and, the best reason
for it, is electrically isolating so can obviate problems with differences
in ground potentials, electrolytic corrosion etc.. Although the majority of
Ethernet tranceivers connect to the twisted-pair cable via transformers,
these are not to be relied on during a thunderstorm

)
Hope that helps,
Dave H.
(The engineer formerly known as Homeless)