International Computer Engineering Conference

Undetectable Tapping Methods for Gigabit Passive Optical Network (GPON)

M Diaa, Mohamed Ahmed Shalaby, A. A. Mohamed, Kamel M. Hassan, Ayman M. Mokhtar

Published Dec 1, 2018• 7 citations

Abstract

For a certain specified Gigabit passive optical network (GPON), the recommended splitting ratio (SR), used by an eavesdropper, which guarantees the ability to intercept optical signal without being suspected by the end users has been found. As well as the minimum bending radius (BR) which achieves the safe interception has been given also. We showed that (SR) and (BR) depend on the parameters of the optical fiber network.

DOI: 10.1109/icenco.2018.8636110

Related papers

Towards Secure Gigabit Passive Optical Networks - Signal Propagation based Key Establishment

Lukáš Malina, Petr Münster, Jan Hajný +1 more

Nowadays, the Passive Optical Networks (PONs) technology is widely deployed in broadband access networks. This paper deals with the security issues of Gigabit PON (GPON) standardized by the International Telecommunications Union (ITU), namely, standard ITU-T G.984 that is widely implemented in Europe these days. We describe and analyze the security of this standard and show its security risks. In spite of that transmitted data are encrypted to provide their confidentiality on a multipoint fibre connection, session secret keys during their establishment can be observed by adversaries. To address this security flaw, we propose a key establishment protocol that securely sets the session secret keys between two communication parties in GPON. Furthermore, we provide the security analysis of the proposed protocol.

International Conference on Security and CryptographyJan 1, 20158 citations

Quantum secured gigabit optical access networks

Bernd Fröhlich, J. F. Dynes, Marco Lucamarini +4 more

Optical access networks connect multiple endpoints to a common network node via shared fibre infrastructure. They will play a vital role to scale up the number of users in quantum key distribution (QKD) networks. However, the presence of power splitters in the commonly used passive network architecture makes successful transmission of weak quantum signals challenging. This is especially true if QKD and data signals are multiplexed in the passive network. The splitter introduces an imbalance between quantum signal and Raman noise, which can prevent the recovery of the quantum signal completely. Here we introduce a method to overcome this limitation and demonstrate coexistence of multi-user QKD and full power data traffic from a gigabit passive optical network (GPON) for the first time. The dual feeder implementation is compatible with standard GPON architectures and can support up to 128 users, highlighting that quantum protected GPON networks could be commonplace in the future.

arXiv:1509.03496Scientific ReportsDec 14, 201591 citations

Limits of intrusion detection systems in a gigabit optical link

Abrar Salim, Saul S. Carroll, Javid Atai

We systematically investigate the capabilities of a commercial intrusion detection system for a gigabit optical Ethernet network. It is found that the location of the tap and the amount of light tapped out are key factors in being able to successfully intercept the data. It is also shown, for the first time, that there is a region within the plane of distance from the transmitter versus power penalty where the link can be tapped and the data can be extracted successfully without the intrusion being detected.

Optical EngineeringApr 1, 20103 citations

The use of passive optical devices for the protection of information in fiber-optic communication lines and networks

Oleksandr Manko, О. С. Шматок, Андрій Борисович Петренко

Every year increases the amount of confidential information that is transmitted in optical communication networks. To ensure safe transmission of confidential information fiber optic lines are the most suitable. It is determined that the electromagnetic field of the light wave does not go beyond the optical fiber. However, under certain circumstances, interception of optical signal on the bend of the fibers is entirely possible. Thus, for the creation of optical lines with high level of information security are necessary additional measures. To this aim, in the proposed use of masking optical linear code by increasing the numbers of units are used passive components such as optical delay lines and optical splitters. The method allow increasing the number of units of code combinations to be transferred, and thus make it impossible for an adequate interpretation of the information. The advantage of the method is that the protection device is completely passive, and therefore reliable, and can be connected directly to the input and output of optical linear tract. Moreover, these devices do not require adjustment.

Ukrainian Information Security Research JournalJun 26, 20170 citations

Optical fiber tapping: Methods and precautions

M. Zafar Iqbal, Habib Fathallah, Nezih Belhadj

Optical fiber communication is not as secure as generally perceived. There are a number of known methods of extracting or injecting information into a fiber link, while avoiding detection. Few incidents have been reported as a successfully tapped fiber is difficult to detect. In this paper we highlight a number of known fiber tapping methods. We report simulation of optical characteristics of a fiber being tapped by `bend' method and proof of concept with physical experiment. We also presented visualized scenarios in which a resourceful eavesdropper can compromise security of a fiber link with existing technologies. Some measures to prevent fiber tapping or to nullify the significance of information tapped from fiber were also discussed.

International Symposium on High-capacity Optical Networks and Enabling TechnologiesDec 1, 201177 citations

Hidden in full light or How light illuminating an optical fiber could be used to find the encryption keys of yours communications

Philippe Jaillon

Les infrastructures de réseaux optiques sont aujourd’hui massivement déployées sur notre territoire. Parmi les différentes technologies disponibles, le GPON (Gigabit Passive Optical Network) est sans doute le plus répandu.Lorsque l’on s’intéresse à la sécurité des échanges sur ce type de réseau, on se rend compte que si des précautions ont bien été prises au niveau protocolaire, il serait possible, en observant la lumière illuminant les fibres optiques d’en extraire des informations qui pourraient permettre de retrouver les clefs chiffrant les communications.Cet exposé présentera de quelle manière il est possible de tirer profit du protocole ITU-G.984, les difficultés rencontrées dans le cas d’une de nos études et les résultats obtenus.

Feb 23, 20230 citations