Slashdot Mirror


NSA Patents a Way To Spot Network Snoops

narramissic writes "The National Security Agency has patented a technique for figuring out whether someone is messing with your network by measuring the amount of time it takes to send different types of data and sounding an alert if something takes too long. 'The neat thing about this particular patent is that they look at the differences between the network layers,' said Tadayoshi Kohno, an assistant professor of computer science at the University of Washington. But IOActive security researcher Dan Kaminsky wasn't so impressed: 'Think of it as — if your network gets a little slower, maybe a bad guy has physically inserted a device that is intercepting and retransmitting packets. Sure, that's possible. Or perhaps you're routing through a slower path for one of a billion reasons.'"

3 of 161 comments (clear)

  1. NSA patenting it because... by ATestR · · Score: 4, Insightful

    They don't want any of US to have access to such technology when THEY slap the monitoring devices on our network.

    --
    âoeAny society that would give up a little liberty to gain a little security will deserve neither and lose both.
    1. Re:NSA patenting it because... by SatanicPuppy · · Score: 4, Insightful

      I was thinking the same thing...But in this world, it's more likely that they patented it so that some stupid patent troll won't get the opportunity to sue the gov't.

      --
      ad logicam Claiming a proposition is false because it was presented as the conclusion of a fallacious argument.
  2. Prior art: L0pht antisniff from 1999? by Hobart · · Score: 4, Insightful

    Looking at the article, (and having skimmed but not read all of the patent), isn't AntiSniff (released by DilDog of L0pht in 1999) using this technique? (Slashdot article, Aug '99)

    Original tech paper was on l0pht.com (now defunct) - looks like archive.org doesn't have a mirror, here's the best copy I could find in Google: http://servv89pn0aj.sn.sourcedns.com/~gbpprorg/l0pht/antisniff/tech-paper.html

    --
    o/~ Join us now and share the software ...