national serveilance system security
TRANSCRIPT
-
7/29/2019 National Serveilance System Security
1/11
Trh`jjcgkes ho tmj @yajr Ufrofrj Uhrnsmhp
Kftghkfb Purvjgbbfk`j Pj`urgty
A+ N+ Z+ Q+ Kfwfrftkj-47403=J')" C+ F+ Z+Kfkfyfnnfrf-474031O'" I+ B+ T+ Q+
Tjrjrf-474051_'"L+ L+ F+ C+ P+Lfkkfppjrulf-47406=L'fkc @+
Lfkefbjswfrfk-474065I'
Zkgvjrsgty ho Lhrftuwf" Nftuajccf" Lhrftuwf" Prg Bfknf
J,Lfgbs9Qfsmlgnf 9 rfzlgn=7Delfgb+`hl> Fsgtmf 9cfuk45Delfgb+`hl> Tfsgkcu 9
pjrjrf+pfsgkcuDelfgb+`hl> Cghcf 9cghhcjDelfgb+`hl> @mfflgkg 9
`mffl111Delfgb+`hl
) Futmhr th wmhl `hrrjsphkcjk`j smhubc aj fccrjssjc> Sjb+9 .73,4565,=4=,333
Fastrf`t9 Smgs pfpjr oh`usjs hk tmj sj`urgty `hkstrfgkts of`jc ay tmj Kftghkfb
Purvjgbbfk`j gkorfstru`turj gk Prg Bfknf+ Kftghkfb survjgbbfk`j systjl gs fk
glphrtfkt rjvhbutghk tmft gktjerftjs fbb `rgtg`fb kftghkfb gkorfstru`turjs th lhkgthr
tmj kftghkwgcj sj`urgty ay prjvjktgke mulfk fkc fkglfb trfoog`ngke" f``gcjkt
lhkgthrgke" jt`+ Smj pfpjr `hktjxt gs ahukcjc hkby th systjl fkc sj`urgty
rjqugrjljkts ho tmj Kftghkfb Purvjgbbfk`j systjl+ Smj ejkjrfb sj`urgty lhcjb ohr
tmj prhtj`tghk ho tmj systjl gs cjsgekjc fkc prjsjktjc gk tmj pfpjr+
Njywhrcs9 Pj`urgty" Purvjgbbfk`j" Kftghkfb" @@S_" @rgtg`fb" Gkorfstru`turj
6+ Gktrhcu`tghk
Jksurgke kftghkfb sj`urgty gs hkj ho tmj lhst glphrtfkt rjsphksgagbgtgjs ho f ehvjrkljkt ho
fky kftghk+ Jvjry kftghk mfs f kftghkfb sj`urgty lhcjb wmg`m jk`hlpfssjs cgoojrjkt sj`urgty
rjqugrjljkts ohr cgoojrjkt chljstg` `hrj vfbujs+ Fs kftghkfb sj`urgty `mfbbjkejs mfvj aj`hlj
lhrj `hlpbjx" ehvjrkljkts frj bhhngke th cjvgsj fk fpprhprgftj sj`urgty orfljwhrn
fr`mgtj`turj wmg`m `fk prhtj`t kftghkfb `hrj vfbujs orhl jxtjrkfb tmrjfts+
F kftghkfb survjgbbfk`j systjl gs hkj ho su`m sj`urgty lhcjbs wmg`m `fk aj glpbjljktjc th
jksurj kftghkfb sj`urgty ay gktjerftgke fbb kftghkfb `rgtg`fb gkorfstru`turjs+
1+ Af`nerhukc
mailto:[email protected]:[email protected]:[email protected]:[email protected]:[email protected]:[email protected]:[email protected]:[email protected]:[email protected]:[email protected]:[email protected]:[email protected]:[email protected]:[email protected]:[email protected]:[email protected]:[email protected]:[email protected]:[email protected] -
7/29/2019 National Serveilance System Security
2/11
Smj s`hpj ho tmgs pfpjr gs hk kftghkfb survjgbbfk`j systjl ho Prg Bfknf afsjc hk @@S_
-@bhsjc @gr`ugt Sjbjvgsghk' tj`mkhbhey fkc sjksgke tj`mkhbhegjs+ Mjk`j wj wgbb prglfrgby
fkfbyzj tmj @@S_ survjgbbfk`j systjl glpbjljktjc gk @hbhlah fs wjbb fs tmj
`hllukg`ftghk systjl wmg`m gs glpbjljktjc fbhke tmj kftghkfb `rgtg`fb gkorfstru`turjs gsbfkc
wgcj+
@urrjktby Prg Bfknf Thbg`j mfs cjpbhyjc @@S_ `fljrfs hk vgtfb bh`ftghks gk @hbhlah `gty
fkc kjfray suaurafk frjfs+ Gk fccgtghk tmjy frj usgke lhagbj survjgbbfk`j ukgts th lhkgthr tmj
kftghkfb sj`urgty+ Fbb tmj vgcjh cftf `fpturjc ay tmj survjgbbfk`j `fljrfs frj trfkslgttjc vgf
f mgem spjjc GT,_TK th tmj `jktrfb `hktrhb rhhl+
Smj @@S_ `fljrfs cjpbhyjc frj `fpfabj ho `fpturgke vgcjhs ft fky tglj ho tmj cfy fkc tmj
`jktrfb `hktrhb rhhl `fk `hktrhb -pfk" tgbt fkc zhhl,TSY' hkj `fljrf ft jf`m bh`ftghk+ Smj
`fljrfs frj ogttjc wgtm vjrg,oh`fb bjksjs th `fpturj smfrp glfejs+ Fkc tmj lhagbj ukgts usjlhagbj 0E tj`mkhbhegjs th trfkslgt cftf+ Pgk`j `urrjktby tmj wgrjc survjgbbfk`j gs
glpbjljktjc gk tmj `huktry wj lfgkby oh`us hk tmft gk tmgs pfpjr+
@jktrfb `hktrhb rhhl mfs f vgcjh wfbb" vgcjh sjrvjrs" f `hktrhb cjsn" rj`hrcgke jqugpljkt"
fkc BFK jqugpljkt+ _gcjh wfbb cgspbfys fbb tmj gkput orhl tmj `fljrfs tmrhuem B@C
lhkgthrs fkc usgke tmj `hktrhb cjsn tmj survjgbbfk`j tjfl hk cuty `fk `hktrhb tmj `fljrfs
fkc sjbj`t cjsgrjc `fljrf gkput fkc fr`mgvj ohhtfejs go kjjcjc+
Smj systjl gs `fpfabj ho mfkcbgke phwjr ofgburjs+ Fbb tmj `fljrfs frj phwjrjc vgf ZTP+ Fkc
tmj `jktrfb `hktrhb rhhl jqugpljkt gs phwjrjc ay fk hk,bgkj ukgktjrruptjc phwjr suppby
prhvgcjc ay twh ZTP cjvg`js `hkkj`tjc gk pfrfbbjb rjcukcfkt lhcj+
Fkc tmj systjl gs `hktrhbbjc ay f vgcjh lfkfejljkt shotwfrj tmft `fk mfkcbj lubtgpbj vgcjh
ojjcs sglubtfkjhusby fkc sthrj cftf fkc `hktrhb `fljrfs+ Smj systjl mfs tmj ouk`tghkfbgtgjs
su`m fs futhlftg` kulajr pbftj rj`hekgtghk -FKTQ' fkc of`gfb rj`hekgtghk -OQ'+ Aut tmj
systjl gs kht `hkkj`tjc th prhpjr cftfafsjs th usj tmj FKTQ fkc OQ ojfturjs -tmj @@S_
`fljrfs frj `fpfabj ho prhvgcgke cftf th f``hllhcftj tmjsj ojfturjs'
Smj `urrjkt systjl gs f slfbb s`fbj glpbjljktftghk ho wmft tmj pfpjr cgs`ussjs+ Smj systjl
gs bglgtjc th ojw @@S_ `fljrfs cjpbhyjc hk @hbhlah fkc kjfray suaurafk frjfs fkc tmj
survjgbbfk`j systjl glpbjljktjc gk mgem sj`urgty zhkjs ho tmj `huktry+ Aut th rjfp tmj
ajkjogts ho lhcjrk tj`mkhbhey th glpbjljkt f ajttjr kftghkwgcj survjgbbfk`j systjl" tmj
systjls ho gkcgvgcufb futmhrgtgjs `fkkht whrn gk gshbftghk+ Kftghkfb `rgtg`fb gkorfstru`turj bgnj
fgrphrts" mfrahrs wmjrj pjhpbj ejt gkth fkc hut ho tmj `huktry smhubc fbsh aj `hvjrjc+ Ugtm
tmj s`fbgke up ho tmj systjl fr`mgtj`turfb" sj`urgty fkc `hmjsghk gssujs frgsj+ Fbsh jrrhr prhkj
trfkslgssghk ljtmhcs bgnj lhagbj 0E tj`mkhbhegjs smhubc aj usjc wgtm `frj+ Fkc tmj ohr
ajttjr of`gfb rj`hekgtghk systjls tmj Thbg`j cjpfrtljkt cftfafsjs smhubc aj `hkkj`tjc th tmj
kftghkfb survjgbbfk`j ergc+ Smj gssujs `hk`jrkgke glpbjljktgke tmjsj systjls fkc
-
7/29/2019 National Serveilance System Security
3/11
rj`hlljkcftghks hk mhw th glpbjljkt f sj`urj kftghkwgcj survjgbbfk`j systjl wgbb aj
cgs`ussjc gk kjxt sj`tghks+
0+ Pystjl Fkfbysgs
Smj kftghkfb survjgbbfk`j systjl `hksgsts ho mfrcwfrj fkc shotwfrj shbutghks+ Ohr tmj systjl
th whrn prhpjrby" tmjy kjjcs tmjrj frj kulajr ho qufbgty stfkcfrcs th aj ljt fkc cgoojrjkt
prh`jssjs tmj systjl smhubc eh tmrhuem+ Smgs sj`tghk cjs`rgajs tmj mfrcwfrj fkc shotwfrj
fspj`ts ho tmj systjl fkc tmj pmysg`fb rjshur`js kjjcjc th `hlpbjtj tmj prhij`t+
Ogeurj 6+ -f' @hllukg`ftghk Cjsgek ho tmj Purvjgbbfk`j Pystjl
Smgs gs tmj hvjrfbb cjsgek fr`mgtj`turj ho tmj systjl+ Pystjl wgbb `hksgst ho kjtwhrn ho @@S_
`fljrfs hk urafk `gtgjs wmg`m frj gktjr`hkkj`tjc usgke 0E hr JCEJ tj`mkhbhey -Gk tmj
`urrjkt systjl" wgrjbjss tj`mkhbhey gs kht yjt glpbjljktjc+ Ogarj @mfkkjb `hllukg`ftghk
bgkjs frj usjc' th f `jktrfb `hktrhb stftghk+ Gt wgbb fbsh aj `hkkj`tjc th tmj puabg` kjtwhrn vgf
ogrjwfbb fkc wgbb aj njjpgke rj`hrcs ho tmj vgcjh ojjc+ Lfgk sjrvjr wgbb njjp vgcjh ojjc ho
tmj lhst rj`jkt wjjn+ Tfst cftf wgbb aj af`njc up hk cftfafsjs fkc fotjr 0 lhktms gt wgbb ajtfpjc gk fr`mgvjs+
-
7/29/2019 National Serveilance System Security
4/11
0+6 Ogxjc @fljrf Bh`ftghks
Zrafk bh`ftghks wgbb aj gcjktgogjc fkc wgbb aj prhvgcjc wgtm ogxjc mgem rjshbutghk" kgemt
vgsghk `fljrfs wgtm zhhl `fpfagbgty+ Smjy wgbb fbsh `hktfgk f obfsm ljlhry ohr tjlphrfry
kjtwhrn arjfnchwks up th ? mhurs+ @fljrfs wgbb aj `hkkj`tjc th tmj lfgk kjtwhrn usgke 0Ehr JCEJ tj`mkhbhey fkc smhubc whrn wgtm 104_ :4mz phwjr shur`j wmg`m `fk aj jfsgby
suppbgjc+
Fbb tmj `fljrf ukgts smhubc aj wjftmjr,rjsgstfkt" oubb 1:x hptg`fb zhhl fkc wgcj fkebj+
@fljrf smhubc aj `fpfabj ahtm futhlftg` fkc lfkufb oh`usgke+ Gt smhubc fbsh aj `hktrhbbjc
orhl tmj afsj stftghk rjlhtjby+ 0?4 cjerjj lhtghk smhubc aj supphrtjc fkc smhubc aj
sjeljktjc th 6? jqufb phsgtghks th `hktrhb orhl tmj afsj stftghk+
0+1 _gcjh Ptrjflgke" Srfkslgssghk fkc @hllukg`ftghk
Lfgk ljcgul ho `hllukg`ftghk flhke `fljrfs fkc lfgk stftghk gs vgf lhagbj kjtwhrn+ 0E
kjtwhrn gs jssjktgfb wmgbj JCEJ kjtwhrn gs prjojrrjc+ Sh sjtup f cjcg`ftjc fkc rjbgfabj
`hkkj`tghk `hktf`tgke tmj sjrvg`j prhvgcjrs fkc lfnj fky frrfkejljkt gs prjojrrjc+ F prgvftj
_TK gs augbt uphk tmj puabg` kjtwhrn ohr futmjktg`gty+
0+0 @hktrhb Ptftghk
@hktrhb Ptftghk `hksgsts ho ohbbhwgke gtjls wmg`m wgbb aj tmj afsj stftghk th `hktrhb tmj
`fljrfs+ Gt wgbb gssuj `hllfkcs th `fljrfs th rhtftj fkc zhhl fs kjjcjc+
0+0+6 _gcjh Ufbb
F sjeljktjc cgspbfy ho fbb tmj `fljrf ojjcs gs cgspbfyjc hk f sgkebj wfbb th vgjw tmj hvjrfbb
stftus ho `fljrfs+ Pjrgjs ho wfbb lhuktjc ahrcjr bjss B@C S_s wgbb aj usjc+ Smjy smhubc aj
gktjr`hkkj`tjc fkc smhubc aj `fpfabj ho cgspbfy fs f sgkebj cgspbfy+
0+0+1 Lfgk _gcjh Pjrvjr
Lfgk _gcjh Pjrvjrs rhutj tmj vgcjh ojjc wgtmgk tmj `hktrhb stftghk+ Fs tmj prhij`t s`fbjs lhrjsjrvjrs wgbb aj kjjcjc+ Lfgk sjrvjr wgbb `f`mj tmj vgcjh ojjc ho tmj lhst rj`jkt wjjn ohr
pbfyaf`n of`gbgtgjs hk tmj `hktrhb stftghk+ Smjk tmj cftf wgbb aj fr`mgvjc+
0+0+0 Qj`hrcgke jqugpljkt
Pgk`j tmj `fljrf wgbb aj cgrj`tby `hkkj`tjc th tmj _TK kh fccgtghkfb cjvg`js kjjcs th aj
fppbgjc th rj`hrc hk tmj orhkt jkc+ Aut cuj th ukrjbgfagbgty ho tmj kjtwhrn jf`m `fljrf wgbb aj
`fpfabj ho rj`hrcgke ? mhurs ho tmj vgcjh ojjc hk tmj `fljrf gtsjbo gk `fsj ho f kjtwhrn
ofgburj+
-
7/29/2019 National Serveilance System Security
5/11
3+ Pj`urgty Fkfbysgs
Fs cgs`ussjc gk tmj Pystjl Fkfbysgs wj sfw tmft tmjrj frj `rgtg`fb `hlphkjkts fkc jxtrjljby
`rgtg`fb cftf frj ajgke trfksphrtjc fkc sthrjc wgtmgk tmj systjl+ Smj cftf fkc gkohrlftghk hk
ehvjrkljkt cjpfrtljkts" lgbgtfry" phwjr pbfkts" ogkfk`gfb gkstgtutghks fkc mhspgtfbs wgbb ajlfihr pfrt ho tmhsj `rgtg`fb cftf+ Go tmhsj jktgtgjs eht fttf`njc" lfky fspj`ts ho tmj `huktry
whubc aj gk cfkejr+ Zbtglftjby tmj jktgrj kftghks sj`urgty whubc aj gk cfkejr+ Ourtmjrlhrj
tmj prgvf`y ho tmj gkcgvgcufbs ho tmj kftghk whubc fbsh aj gk `rgtg`fb stftj+ Smus prhvgcgke
sj`urgty ohr tmj Kftghkfb Purvjgbbfk`j Pystjl gs jxtrjljby glphrtfkt+
Gkgtgfbby wj wgbb gktrhcu`j tmj sj`urgty rjqugrjljkts ohr tmj Kftghkfb Purvjgbbfk`j Pystjl+
Smjk wj wgbb prh`jjc wgtm gktrhcu`gke f sj`urgty lhcjb ohr tmj survjgbbfk`j systjl+
Lhrjhvjr" rj`hlljkcjc glpbjljktftghk lj`mfkgsls ohr tmj lhcjb wgbb aj gktrhcu`jc gk tmj
pfpjr+
3+6 @hkogcjktgfbgty
@hkogcjktgfbgty gs f lfgk sj`urgty rjqugrjljkt ohr tmj Kftghkfb Purvjgbbfk`j Pystjl+
Trjvjktghk ho ukfutmhrgzjc cgs`bhsurj ho gkohrlftghk gs ljfkt ay `hkogcjktgfbgty fkc tmgs gs
rjqugrjc cuj th ahtm sj`rj`y fkc prgvf`y ho tmj `rgtg`fb cftf lfgktfgkjc gk tmj systjl+
Fs fk jxflpbj wj frj usgke tmj survjgbbfk`j systjl gk f ogkfk`gfb gkstgtutj+ Fkc wj wgbb aj
lhkgthrgke tmj gkorfstru`turj ho tmj gkstgtutj+ Gk `fsj tmj systjl gs fttf`njc fkc tmj
survjgbbfk`j cftf wgtmmhbcs ay tmj fttf`njr" tmj jktgrj ogkfk`gfb gkstgtutjs sj`urgty stftus
whubc aj gk cfkejr+ Smus sj`rj`y ho tmj survjgbbfk`j cftf gs vjry glphrtfkt+
Fkhtmjr fspj`t ho tmj Kftghkfb Purvjgbbfk`j Pystjl gs usgke @@S_ th lhkgthr tmj puabg`
trfksphrtftghk gkorfstru`turj+ Go tmj cftf gs wgtmmjbc ay fky ukfutmhrgzjc pfrty" tmj prgvf`y ho
`gtgzjks ho tmj `huktry `hubc aj gk cfkejr+ Smus sj`urgke prgvf`y ho tmj systjl gs jssjktgfb
sj`urgty rjqugrjljkt+
3+1 Gktjergty
Zkfutmhrgzjc lhcgog`ftghk hr fbtjrftghk ho tmj kftghkfb survjgbbfk`j gkohrlftghk smhubc kht
aj fbbhwjc+ Gktjergty ho tmj cftf smhubc aj prjsjrvjc+ Smft gs lfgkby aj`fusj lhst ho tmj
sj`urgty rjbftjc cj`gsghks frj tfnjk afsjc hk tmj gkohrlftghk f`qugrj orhl tmj survjgbbfk`j
systjl+ Go fky cj`jgtoub fbtjrftghk gs `hllgttjc ay fk ukfutmhrgzjc pfrty" tmjk tmj cj`gsghks
wmg`m frj tfnjk ay tmj futmhrgzjc pfrtgjs wgbb aj gkf``urftj+ Ugtm tmj jrrhkjhus cj`gsghks tmj
kftghk `hubc jkc up gk f `rgtg`fbby cfkejrhus sgtuftghk+
3+0 Fvfgbfagbgty
Ohr kftghkfb survjgbbfk`j systjl th sjrvj gts purphsj" tmj gkohrlftghk lust aj fvfgbfabj ohr
tmj futmhrgzjc pfrtgjs wmjkjvjr gt gs kjjcjc+ Smft ljfks tmj sthrj" prh`jss" `hktrhb fkc
-
7/29/2019 National Serveilance System Security
6/11
`hllukg`ftghk ho tmj gkohrlftghk smhubc aj ouk`tghk prhpjrby+ Pglpbj tmj sj`urgty systjl ho
smhubc prjvjkt ukfutmhrgzjc wgtmmhbcgke ho cftf+
3+3 Futmjktg`gty
Smj systjl lust jksurj tmft tmj cftf fkc `hllukg`ftghks frj ejkugkj+ _fbgcftghk ho ahtm
pfrtgjs gkvhbvjc gk f `hllukg`ftghk gs glphrtfkt+ Smjrjohrj gk trfksf`tghks fkc usjs ho tmj
systjl" gt lust prhvj tmft tmj usjr gs tmj hkj wmhl tmj usjr `bfgls th aj+
3+: Pj`urgty lhcjb
Cjsgek ho tmj Pj`urgty Lhcjb ohr tmj Kftghkfb Purvjgbbfk`j Pystjl smhubc aj `hlphsjc ho
sjvjrfb fspj`ts+ Smj lfihr sj`urgty fspj`t smhubc aj tmj pmysg`fb sj`urgty+ Go tmj pmysg`fb
sj`urgty ho tmj systjl gs arjf`mjc" fbb tmj shotwfrj sj`urgty lj`mfkgsl whubc aj gkfcjquftj+
Smus wj mfvj th lfnj surj tmft tmj systjl ejts f lfxglul pmysg`fb sj`urgty+
3+:+6 Tmysg`fb Pj`urgty
Tmysg`fb sj`urgty `fk aj cjs`rgajc fs tmj ljfsurjs tmft frj tfnjk th cjky f``jss th
ukfutmhrgzjc pjrshkkjb orhl pmysg`fbby f``jssgke tmj augbcgke" survjgbbfk`j rjshur`j hr
sthrjc gkohrlftghk+
Uj usj cjojksj gk cjptm ^6\ pmysg`fb sj`urgty lhcjb ohr tmj purphsj ho pmysg`fb sj`urgty
lhcjb ohr tmj Kftghkfb Purvjgbbfk`j Pystjl prhtj`tghk+ Smj oukcfljktfb `hk`jpt ho pmysg`fb
sj`urgty gs f `hlagkftghk ho>
6+ Cjtjr
1+ Cjbfy
0+ Cjtj`t
3+ Cjky
F``hrcgke th tmj lhcjb" wj mfvj th cgs`hurfej tmj gktrucjrs hr fttf`njrs gk `hllgttgke
ukfutmhrgzjc f``jssjs th tmj systjl+ Uj `fk cjtjr tmj ukfutmhrgzjc pjrshks ay gkstgbbgke
chuat hr ojfr ho tmj `hksjqujk`js ho tmj sgtuftghk+ Umjk `hkstru`tgke ljcgf rjbjfsjs ho tmj
systjl" tmj puabg` smhubc lfnj fwfrj ho tmj mgem sj`urgty fspj`ts -ho `hursj gk bjss cjtfgb'
fkc sjrghus `hksjqujk`js ho gt+ Zbtglftjby ejkjrfb puabg` -gk`bucgke phtjktgfb fttf`njrs'
smhubc fwfrj ho tmft gt gs cgoog`ubt" rgsny fkc `hstby th jvjk fttjlpt fk gktrusghk+
Smjk gt rjqugrjs cjbfygke fky phtjktgfb fttf`n+ Smj sj`urgty lhcjb glpbjljktftghk smhubc
tfnj kj`jssfry f`tghks gk cjbfygke fky phtjktgfb fttf`n th tmj systjl+
Gk `fsj ho f pmysg`fb fttf`n gs fahut th h``ur" tmj sj`urgty lhcjb smhubc gcjktgoy tmj phtjktgfb
fttf`n+ Fkc tmjk gt smhubc tfnj kj`jssfry f`tghk th prjvjkt gt+
-
7/29/2019 National Serveilance System Security
7/11
Tfssgvj pmysg`fb sj`urgty gs tmj kjxt fspj`t ho tmj gktrhcu`jc sj`urgty lhcjb+ F``jss th tmj
of`gbgty hr tmj augbcgke smhubc aj lhkgthrjc fkc `hktrhbbjc+ Ohr fk jxflpbj chhrs" bh`ns"
mjftgke fkc fgr `hkcgtghkgke" slhnj fkc ogrj fbfrls" ogrj supprjssghk systjls" `fljrfs" wfbbs"
sj`urgty eufrcs smhubc aj lhkgthrjc 13 mhurs+
Ourtmjrlhrj tmj `hk`jpt ho sjpfrftghk ho `hk`jrks -cutgjs' smhubc aj glpbjljktjc wgtm tmj
lhcjb+ Pjpfrftghk ho cutgjs jksurjs tmft fk gkcgvgcufb `fkkht `hlpbjtj f `rgtg`fb tfsn ay
mglsjbo+ Ohr fk jxflpbj tmj lhkgthrgke fkc sthrgke tmj fr`mgvj cftf smhubc kht aj chkj ay f
sgkebj pjrshk" aut gt smhubc eh tmrhuem f prh`jcurj wmg`m `hlphsjc ho mgjrfr`my ho
jlpbhyjjs+ Fbsh tmjsj rhbjs fkc rjsphksgagbgtgjs lust aj sjpfrftjc orhl hkj fkhtmjr+
Smj lhst bgnjby fttf`n typj wmg`m `fk h``ur ohr tmj kftghkfb survjgbbfk`j systjl gs f shotwfrj
afsjc sj`urgty arjf`m+ Ugtm f shotwfrj afsjc sj`urgty arjf`m" gt gs rjbftgvjby `mfbbjkegke th
gcjktgoy tmj fttf`njr hr th gcjktgoy tmj h``urrjk`j ho fk fttf`n+ Smus ukfutmhrgzjc f``jss gs
mgemby bgnjby th mfppjk hk tmj kftghkfb survjgbbfk`j kjtwhrn gkorfstru`turj+
3+:+1 Photwfrj afsjc sj`urgty
Uj gktrhcu`j f sj`urgty lhcjb ohr tmj kftghkfb survjgbbfk`j systjl gk tmgs pfpjr+ Smj lhcjb
wj gktrhcu`j gs gkobujk`jc orhl Ajbb,Bf,Tfcubbf sj`urgty lhcjb fkc AgAf Pj`urgty lhcjb+ Gk
tmgs lhcjb tmjrj frj ogvj lfihr `hlphkjkts+
6+ Haij`ts
1+ Puaij`ts
0+ Pj`urgty @bfssgog`ftghk
3+ Pj`urgty Ouk`tghks
:+ Pj`urgty Trhpjrtgjs
Haij`ts frj tmj systjl rjshur`js+ Smj gkohrlftghk f`qugrjc orhl vfrghus survjgbbfk`j
`hlphkjkts ho tmj systjl frj `bfssgogjc fs tmj haij`ts ho tmj sj`urgty lhcjb+
Smj suaij`ts frj tmj usjrs ho tmj systjl+ Orhl tmj fclgkgstrfthr th tmj systjl lfgktfgkjr frj
`bfssgogjc fs tmj suaij`ts+
3+:+1+6 Pj`urgty @bfssgog`ftghks
Fotjr tmj `bfssgog`ftghk ho suaij`ts fkc haij`ts wj smhubc rj`hekgzj tmj vfbuj ho gkohrlftghk
fkc cjogkj fpprhprgftj prh`jcurjs fkc prhtj`tghk rjqugrjljkts ohr tmj gkohrlftghk fkc
`rgtg`fb rjshur`js usjc ohr tmj kftghkfb survjgbbfk`j systjl+ Fbb gkohrlftghk wgtmgk tmj systjl
gs kht jqufb fkc tmus tmjy ch kht kjjc tmj sflj cjerjj ho prhtj`tghk+ Smgs rjqugrjs
gkohrlftghk th aj `bfssgogjc f``hrcgke th f sj`urgty `bfssgog`ftghk+
Smj sj`urgty phbg`y ohr sj`urgty `bfssgog`ftghk smhubc `hlphsj ho sj`urgty bfajbs fkc smhubc
cjogkj tmj `rgtjrgf ohr gkohrlftghk th aj fssgekjc f pfrtg`ubfr bfajb+ Fbsh smhubc bgst tmjrjqugrjc sj`urgty `hktrhbs ohr jf`m `bfssgog`ftghk typj+
-
7/29/2019 National Serveilance System Security
8/11
Smj sj`urgty `bfssgog`ftghk smhubc aj `hkstru`tjc f``hrcgke th tmj sjksgtgvgty ho tmj
gkohrlftghk+ Ohr fk jxflpbj go wj tfnj tmj @@S_ vgcjh ohhtfej orhl f lfgk rhfc" gt gs kht
lu`m `rgtg`fb fs tmj sjksgke gkohrlftghk ho tmj Kftghkfb Afkn hr tmj Cjpfrtljkt ho Cjojksj+
Smus tmj bfttjr gkohrlftghk -Kftghkfb Afkn fkc tmj Cjpfrtljkt ho Cjojksj' smhubc egvj f
mgemjr `bfssgog`ftghk ogjbc rjbftgvj th tmj khrlfb vgcjh ohhtfej ho f lfgk rhfc+
Gk tmj sj`urgty lhcjb wj gktrhcu`j" tmj ohbbhwgke sj`urgty `bfssgog`ftghk gs ohbbhwjc+ Smjy frj
gk tmj mgjrfr`mg`fb hrcjr orhl ahtthl th thp+
6+ Shp Pj`rjt
1+ @hkogcjktgfb
0+ Qjstrg`tjc
3+ Ejkjrfb
Smj gksgcj gkohrlftghk ho afkn trjfsury" cjojksj cjpfrtljkt hr gkohrlftghk hk mgemby `rgtg`fb
gkorfstru`turj frj egvjk tmj `bfssgog`ftghk ho Shp Pj`rjt+ Smjk tmj ejkjrfb @@S_
gkohrlftghk hk lfgk rhfcs wgbb aj egvjk Qjstrg`tjc sj`urgty `bfssgog`ftghk+ Gk f sglgbfr
sjksj wj `fk fbbh`ftj sj`urgty `bfssgog`ftghk ohr fbb tmj gkohrlftghk fkc rjshur`js ho tmj
kftghkfb survjgbbfk`j systjl+
@mj`ngke tmj sj`urgty `bjfrfk`j smhubc aj fcmjrgke th tmj sj`urgty `bfssgog`ftghk+ Fbb tmj
suaij`ts fkc tmj haij`ts wgbb aj egvjk f sj`urgty `bfssgog`ftghk bfajb+ Fkc wmjk f suaij`t
kjjcs th f``jss fky ho tmj haij`ts" mj smhubc futmjktg`ftj usgke mgs sj`urgty `bjfrfk`j ohr tmj
prh`jjcgkes+
3+:+1+1+ Pj`urgty Ouk`tghks
Smj sj`urgty ouk`tghks fbbhw fbbh`ftgke sj`urgty `bfssgog`ftghk ohr tmj suaij`ts fkc haij`ts+
Smjrj frj tmrjj sj`urgty ouk`tghks ohr tmj sj`urgty lhcjb wj gktrhcu`j ohr tmj systjl+
6+ Os9 P,;B Egvjs tmj lfxglul sj`urgty bjvjb jf`m suaij`t `fk mfvj
1+ O`9 P,;B Egvjs tmj `urrjkt sj`urgty bjvjb ho jf`m suaij`t
0+ Oh9 H,;B egvjs tmj `bfssgog`ftghk ohr fbb tmj haij`ts
Gk tmj ogrst ouk`tghk wj fbbh`ftj tmj lfxglul sj`urgty bjvjb f suaij`t `fk mfvj+ Smjrjohrj kh
suaij`t `fk mfvj f mgemjr bjvjb sj`urgty `bfssgog`ftghk bjvjb tmfk tmft ft fky lhljkt ho bgoj
tglj+
Smj sj`hkc ouk`tghk wgbb fbbh`ftj tmj `urrjkt sj`urgty bjvjb ohr f suaij`t+ Fkc tmj tmgrc
ouk`tghk wgbb fbbh`ftj tmj sj`urgty `bfssgog`ftghk bjvjb ohr haij`ts+
3+:+1+0+ Pj`urgty Trhpjrtgjs
Smj sj`urgty prhpjrtgjs wgbb cjogkj tmj lfgk `hk`jpt ho tmj lhcjb+ Mjrj wj `hksgcjr twhsj`urgty prhpjrtgjs ohr tmgs lhcjb+
-
7/29/2019 National Serveilance System Security
9/11
6+ Smj Pglpbj Pj`urgty Trhpjrty9 F suaij`t ft f egvjk sj`urgty bjvjb lfy kht rjfc fk
haij`t ft f mgemjr sj`urgty bjvjb+ Smft gs" rjfc up gs kht fbbhwjc+ Fs fk jxflpbj" f
suaij`t wgtm Qjstrg`tjc sj`urgty bfajb gs kht fbbhwjc th f``jss fk haij`t -rjshur`j'
wgtm @hkogcjktgfb hr Shp Pj`rjt sj`urgty bfajb+ Smgs prhpjrty wgbb jksurj tmj
`hkogcjktgfbgty ho tmj kftghkfb survjgbbfk`j systjl+
1+ Smj Ptfr Trhpjrty9 Jx`jpt ohr tmj suaij`ts wgtm Shp Pj`rjt sj`urgty `bjfrfk`j" kh htmjr
suaij`t `fk wrgtj th fky ho tmj cftf+ Smft gs" go f suaij`t gs wrgttjk hr lhcgoygke tmj
cftf" mj smhubc aj mfvgke f sj`urgty bjvjb ho Shp Pj`rjt+ Smgs prhpjrty wgbb jksurj tmj
gktjergty ho tmj kftghkfb survjgbbfk`j systjl+
3+:+0 F``jss @hktrhb
F``jss th prhtj`tjc gkohrlftghk -haij`ts' lust aj rjstrg`tjc th pjhpbj -suaij`ts' wmh frj
futmhrgzjc th f``jss tmj gkohrlftghk+ Smgs rjqugrjs tmft lj`mfkgsls aj gk pbf`j th `hktrhb tmj
f``jss th prhtj`tjc gkohrlftghk+
Smus wj usj f Qhbj Afsjc lhcjb th `hktrhb tmj f``jss lj`mfkgsl ho tmj survjgbbfk`j systjl+
Smj rhbjs wgbb aj sflj fs tmj sj`urgty `bfssgog`ftghks gktrhcu`jc fahvj+
Smj gcjktgog`ftghk ho tmj suaij`ts wgbb aj chkj ay suaij`t gc -jlpbhyjj GC'+
Smj futmjktg`ftghk usgke tmj tmula prgkt fkc rjtgkf s`fk ho tmj suaij`ts fkc f pfsswhrc ho
lgkglul 6? `mfrf`tjrs -`hlagkftghk ho uppjr`fsj" bhwjr`fsj fkc khk,fbpmf kuljrg`
`mfrf`tjrs'+ Smgs gs `fbbjc twh of`thr futmjktg`ftghks+
Fotjr suaij`t mfs ajjk gcjktgogjc fkc futmjktg`ftjc" gt lust aj cjtjrlgkjc wmft f``jss bjvjb gt
smhubc aj erfktjc+ Smus f `fpfagbgty bgst hk Qhbj afsjc wgbb aj usjc ohr tmj futmhrgzftghk+
Mjrj wj glpbjljkt f Lfkcfthry f``jss `hktrhb fpprhf`m+ Smus f``jss gs erfktjc hr cjkgjc
afsgke uphk tmj sj`urgty `bfssgog`ftghk fssgekjc th tmj haij`t fkc tmj suaij`t+
3+? @ryptherfpmy
Gk tmj prjvfgbgke survjgbbfk`j systjl tmj cftf gs trfksojrrjc vgf Hptg`fb Ogajr `fabjs+ -0E fkcJcej Ugrjbjss tj`mkhbhegjs frj prhphsjc' Smus tmj cftf `fk aj tmrjftjkjc ay tmj ljtmhcs ho
gktjrruptghk" gktjrsj`tghk fkc lhcgog`ftghk wmjk tmj cftf gs trfvjbbgke gk tmj kjtwhrn+
Smjrjohrj wj lust lhcjb sj`urgty ljfsurjs th prjvjkt sj`urgty tmrjfts hk tmj kjtwhrn gtsjbo+
Ohr tmj sj`urgty lhcjb wj gktrhcu`j" wj usj `ryptherfpmy lj`mfkgsl+ Smgs wgbb trfksohrl
tmj `rgtg`fb gkohrlftghk gkth f ohrl tmft rjkcjrs gt ukusfabj ohr tmj ukfutmhrgzjc pfrtgjs+
Pylljtrg` Njy `ryptherfpmy ljtmhc wgbb aj usjc ohr tmj `hllukg`ftghk ho tmj Kftghkfb
Purvjgbbfk`j Pystjl+
-
7/29/2019 National Serveilance System Security
10/11
Gk tmj gkohrlftghk prhcu`gke jkc wj jk`rypt tmj cftf usgke tmj smfrjc njy ho tmj sua,systjl+
Ft tmj survjgbbfk`j jkc wj `fk cj`rypt tmj jk`ryptjc cftf usgke tmj smfrjc prgvftj njy ho tmj
sua,systjl+ Smjrjohrj hk tmj trfksphrtftghk ho cftf" jvjk tmj cftf gs f``jssjc ay
ukfutmhrgzjc pfrtgjs" tmj `hkogcjktgfbgty ho tmj cftf wgbb kht aj `hlprhlgsjc+ Sh jksurj tmj
rjbgfagbgty ho tmj sj`rjt njy" gt wgbb aj `mfkejc gk jvjry 5 cfys+
Mjrj wj mfvj th `hk`jrk fahut tmj bjketm fkc tmj strjketm ho tmj jk`ryptghk njy+ Pgk`j tmj
jk`ryptghk wgbb mfppjk ft tmj sjkshr jkc gt whubc aj glprf`tg`fb th usj mgemby shpmgstg`ftjc
jk`ryptghk cjvg`j ft tmj sjksgke jkc+ Smjrjohrj ojfsgagbgty stucy smhubc aj chkj ajohrj tmj
glpbjljktftghk ho tmj `ryptherfpmy cjvg`js ohr tmj survjgbbfk`j systjl+
:+ @hk`busghks
Pgk`j tmj `hlpbjxgty gk jksurgke kftghkfb sj`urgty mfs gk`rjfsjc hvjr tglj f kftghkfb
survjgbbfk`j systjl gs rjqugrjc ohr Prg Bfknf+ Gt smhubc aj glpbjljktjc gk f wfy wmg`m `fk
jkfabj tmj ehvjrkljkt th trf`n fbb `rgtg`fb kftghkfb gkorfstru`turjs wgtm jrrhr prhkj
lj`mfkgsls -Ahtm sj`urgty fkc systjl rjqugrjljkts' fs sueejstjc gk tmj pfpjr+
Smhuem tmj systjl mfs ajjk glpbjljktjc gk f slfbb s`fbj gk @hbhlah wgtm ojw @@S_
`fljrfs" jxpfkcgke tmft th f kftghkwgcj systjl gktjerftgke fbb `rgtg`fb kftghkfb gkorfstru`turjs
wgbb rjqugrj mgem gkgtgfb `hst fkc lfgktjkfk`j `hst th jksurj tmj systjl gs whrngke rjbgfaby+
Smus f ojfsgagbgty stucy smhubc aj `frrgjc hut th jksurj tmj vgfagbgty ho tmj systjl gk Prg
Bfknfk `hktjxt+
F`nkhwbjcejljkt
Futmhrs ho tmgs pfpjr frj erftjoub th Cr+ @mfkcfkf Eflfej fkc Cr+ Pmfktmf Ojrkfkch ohr tmj
supphrt tmjy mfvj prhvgcjc th f`mgjvj tmj haij`tgvjs ho tmgs rjsjfr`m pfpjr+ Uj frj fbsh bgnj
th smfrj hur erftgtucj wgtm tmj Prg Bfknf Thbg`j Cjpfrtljkt ohr prhvgcgke puabg` cjtfgbs hk
Kftghkfb Purvjgbbfk`j systjl wmg`m gs glpbjljktjc gk Prg Bfknf+
-
7/29/2019 National Serveilance System Security
11/11
Qjojrjk`js
6+ P+ Khrtm`utt" Pj`urgty Bfahrfthry9 Cjojksj gk Cjptm Pjrgjs 1445"
mttp9((www+sfks+jcu(rjsjfr`m(sj`urgty,bfahrfthry(frtg`bj(066"F``jss9 1=+41+1461
1+ C+ Ehbblfkk+ @hlputjr Pj`urgty" 1kc Jc+> Tuabgsmjr9 Ugbjy" Gkcgf" 1445>
GPAK9 =6,1?:,4?74,0
0+ Kjtwhrn Pj`urgty"mttp9((www+wgkchwsj`urgty+`hl(upbfrtg`bj(3(pfrt6+pco^Hkbgkj\
F``jss9 41+40+1461
3+ F``jss @hktrhb" F``jss @hktrhb usgke Pj`urgty Bfajbs / Pj`urgty @bjfrfk`j"
mttp9((www+gshcj+`hl(wmgtjpfpjrs(sj`urgty,bfajbs,`bjfrfk`j+mtlb^Hkbgkj\ F``jss9
46+40+1461
:+ @@S_ Glpbjljktftghk gk Prg Bfknf" Cfyftf Ngrubf Eugcj" Prg Bfknf Thbg`j Cjpfrtljkt+
http://www.sans.edu/research/security-laboratory/article/311http://www.sans.edu/research/security-laboratory/article/311http://www.windowsecurity.com/uplarticle/4/part1.pdfhttp://www.windowsecurity.com/uplarticle/4/part1.pdfhttp://www.windowsecurity.com/uplarticle/4/part1.pdfhttp://www.isode.com/whitepapers/security-labels-clearance.htmlhttp://www.isode.com/whitepapers/security-labels-clearance.htmlhttp://www.isode.com/whitepapers/security-labels-clearance.htmlhttp://www.windowsecurity.com/uplarticle/4/part1.pdfhttp://www.sans.edu/research/security-laboratory/article/311