Title: Interception of Data
Course: IN 2001 Principle of Information Assurance > Section: Module 9: Chapter Nine

Interception of Data
1. There are three methods of data interception: direct observation, interception of data transmission and electromagnetic interception.
2. With direct observation, one must be close enough to information to breach confidentiality.
3. Physical security mechanisms can restrict the possibility of an individual accessing unauthorized areas and thus directly observing information.
4. On the other hand, if attackers can access the transmission media, that is by using the Internet or tapping the LAN, they need not be anywhere near the source of information.
5. It is possible to eavesdrop on cables that emit electromagnetic signals without actually tapping into them.
6. TEMPEST is a technology that involves the monitoring of devices that emit electromagnetic radiation (EMR) in such a manner that the data can be reconstructed.
7. TEMPEST monitoring involves the following: ensuring that computers are placed as far as possible from outside perimeters; installing special shielding inside the CPU case and implementing a host of other restrictions, including maintaining distances from plumbing and other infrastructure components that carry radio waves.