Eavesdropping refers to targeted attacks to communication links, conversations, sound sources of any kind or IT systems in order to collect information. This starts with undetected, secret eavesdropping on a conversation and extends up to highly technical, complex attacks in order to intercept signals that are sent via radio or lines, e.g. by means of antenna or sensors.

Due to the low risk of detection, line or radio communications tapping is a potential threat to information security that should not be overlooked. In principle, there is no such thing as a cable impervious to eavesdropping. Due to the low risk of detection, line tapping is a potential threat to IT security that should not be overlooked. Whether a line is actually being tapped can only be determined using sophisticated instruments.

The insecure transmission of authentication data using plain text protocols like HTTP, FTP or Telnet is especially critical, since they can easily be analysed automatically due to the clear structure of the data.

The decision to eavesdrop on information somewhere basically depends on whether the information that could be obtained is worth the technical and financial expenditure and the risk of detection. This question can only be answered by knowing what capabilities the attacker has and what their particular interests are.

Examples:

Susietos užduotys

Saitai
is blocked by ORP.3.A1 Top Management Awareness of Information Security Issues [Supervisor, Top Management] (B)
is blocked by ORP.3.A3 Training Employees in the Secure Handling of IT [Supervisor, Human Resources Department, IT Operation Department] (B)
is blocked by ORP.3.A7 Training in the IT-Grundschutz Methodology (S)
is blocked by ORP.3.A9 Special Training for Exposed Persons and Organisations (H)
is blocked by ORP.4.A9 Identification and Authentication [IT Operation Department] (B)
is blocked by ORP.4.A18 Using a Central Authentication Service [IT Operation Department] (S)
is blocked by CON.1.A3 Encryption of Communication Links (S)
is blocked by CON.7.A7 Secure Remote Access to an Organisation's Network [IT Operation Department, User] (B)
is blocked by CON.7.A8 Secure Use of Public WLANs [User] (B)
is blocked by CON.7.A14 Cryptographically Secured E-Mail Communication [User, IT Operation Department] (S)
is blocked by CON.8.A5 Secure System Design (B)
is blocked by CON.8.A6 Use of External Libraries from Trusted Sources (B)
is blocked by CON.8.A16 Appropriate Control of Software Development (S)
is blocked by CON.8.A17 Selection of Trusted Development Tools (H)
is blocked by OPS.1.1.5.A12 Encryption of Log Data (H)
is blocked by OPS.1.1.7.A4 Protection of System Management Communication (B)
is blocked by OPS.1.1.7.A5 Mutual Authentication Between the System Management Solution and Systems to be Managed (B)
is blocked by OPS.1.1.7.A6 Securing Access to the System Management Solution (B)
is blocked by OPS.1.1.7.A7 Definition of a Security Policy for System Management (S)
is blocked by OPS.1.1.7.A10 Concept for Secure Operation of the System Management Solution (S)
is blocked by OPS.1.1.7.A11 Regular Gap Analysis Within the Framework of System Management (S)
is blocked by OPS.1.1.7.A17 Control of System Management Communication (S)
is blocked by OPS.1.1.7.A18 System State Verification (S)
is blocked by OPS.1.1.7.A19 Securing System Management Communications Between the System Management Solution and the Systems Being Managed (S)
is blocked by OPS.1.1.7.A21 Physical Separation of the Central System Management Network (H)
is blocked by OPS.1.1.7.A22 Integration of System Management into Automated Detection Systems (S)
is blocked by OPS.1.1.7.A26 Decoupling of Access to the System Management Solution (H)
is blocked by OPS.2.1.A9 Agreements on Connecting to Outsourcing Partner Networks (S)
is blocked by OPS.2.1.A10 Agreement on the Exchange of Data Between Outsourcing Partners (S)
is blocked by OPS.2.2.A7 Drawing Up a Security Concept for Cloud Usage (S)
is blocked by OPS.2.2.A13 Evidence of Sufficient Information Security for Cloud Usage (S)
is blocked by OPS.2.2.A17 Use of Encryption When Using the Cloud (H)
is blocked by DER.2.3.A2 Deciding on a Cleaning Strategy (B)
is blocked by DER.2.3.A4 Blocking and Changing Access Data and Cryptographic Keys (B)
is blocked by DER.2.3.A5 Closing the Initial Entry Route (B)
is blocked by DER.2.3.A7 Targeted System Hardening (S)
is blocked by DER.2.3.A8 Establishing Secure, Independent Communication Channels (S)
is blocked by DER.2.3.A9 Hardware Replacement in Affected IT Systems (H)
is blocked by DER.2.3.A10 Modifications to Help Thwart a Repeat Attack (H)
is blocked by APP.1.2.A13 Use of DNS over HTTPS (B)
is blocked by APP.1.4.A1 Requirements Analysis for the Use of Apps [Process Owner] (B)
is blocked by APP.1.4.A5 Minimising and Checking App Authorisations [Process Owner] (B)
is blocked by APP.1.4.A8 Preventing Data Leaks (B)
is blocked by APP.2.1.A2 Planning the Use of Directory Services [Data Protection Officer, Process Owner] (B)
is blocked by APP.2.1.A3 Setting Up Access Authorisations for Directory Services [Process Owner] (B)
is blocked by APP.2.1.A6 Secure Operation of Directory Services (B)
is blocked by APP.2.1.A13 Protection of Communications with Directory Services (S)
is blocked by APP.2.2.A1 Planning Active Directory [Process Owner] (B)
is blocked by APP.2.2.A2 Planning of Active Directory Administration [Process Owner] (B)
is blocked by APP.2.2.A3 Planning of Group Policy in Windows (B)
is blocked by APP.2.2.A5 Hardening Active Directory (B)
is blocked by APP.2.2.A6 Maintaining the Operational Continuity of Active Directory (B)
is blocked by APP.2.2.A7 Implementation of Secure Administration Methods for Active Directory [Process Owner] (B)
is blocked by APP.2.2.A8 Configuration of Secure Channel in Windows (S)
is blocked by APP.2.2.A9 Authentication Protection When Using Active Directory (S)
is blocked by APP.2.2.A14 Use of Dedicated Privileged Administration Systems (H)
is blocked by APP.2.2.A15 Separation of Administration and Production Environments (H)
is blocked by APP.2.3.A1 Planning and Selecting Back Ends and Overlays for OpenLDAP (B)
is blocked by APP.2.3.A3 Secure Configuration of OpenLDAP (B)
is blocked by APP.2.3.A5 Secure Assignment of Access Rights to OpenLDAP (B)
is blocked by APP.2.3.A6 Secure Authentication for OpenLDAP (B)
is blocked by APP.2.3.A9 Partitioning and Replication in OpenLDAP (S)
is blocked by APP.2.3.A10 Secure Updating of OpenLDAP (S)
is blocked by APP.2.3.A11 Restriction of the OpenLDAP Runtime Environment (S)
is blocked by APP.3.1.A11 Secure Integration of Background Systems (S)
is blocked by APP.3.2.A5 Authentication (B)
is blocked by APP.3.2.A11 Encryption via TLS (B)
is blocked by APP.3.4.A2 Secure Basic Configuration of a Samba Server (B)
is blocked by APP.3.4.A15 Encryption of Data Packets in Samba (H)
is blocked by APP.4.3.A3 Basic Hardening of Database Management Systems (B)
is blocked by APP.4.3.A4 Controlled Creation of New Databases (B)
is blocked by APP.4.3.A12 Uniform Configuration Standard for Database Management Systems (S)
is blocked by APP.4.3.A16 Encryption of Database Connections (S)
is blocked by APP.4.3.A24 Data Encryption in Databases (H)
is blocked by APP.4.3.A25 Security Audits of Database Systems (H)
is blocked by APP.5.2.A11 Protection of Communications Between Exchange Systems (S)
is blocked by APP.5.3.A1 Secure Configuration of E-Mail Clients (B)
is blocked by APP.5.3.A2 Secure Operation of E-Mail Servers (B)
is blocked by SYS.1.2.2.A2 Secure Installation of Windows Server 2012 (B)
is blocked by SYS.1.2.2.A3 Secure Administration of Windows Server 2012 (B)
is blocked by SYS.1.2.2.A4 Secure Configuration of Windows Server 2012 (S)
is blocked by SYS.1.2.2.A5 Protection Against Malware on Windows Server 2012 (S)
is blocked by SYS.1.2.2.A6 Secure Authentication and Authorisation in Windows Server 2012 (S)
is blocked by SYS.1.5.A5 Protection of Administration Interfaces (B)
is blocked by SYS.1.5.A11 Administration of the Virtualisation Infrastructure Using a Separate Management Network (S)
is blocked by SYS.1.5.A16 Encapsulation of Virtual Machines (S)
is blocked by SYS.1.5.A23 Restriction of Rights of Virtual Machines (H)
is blocked by SYS.1.5.A26 Use of a PKI [Planner] (H)
is blocked by SYS.1.5.A27 Use of Certified Virtualisation Software (H)
is blocked by SYS.1.5.A28 Encryption of Virtual IT Systems (H)
is blocked by SYS.1.8.A2 Secure Basic Configuration of Storage Solutions (B)
is blocked by SYS.1.8.A23 Use of Encryption for Storage Solutions (H)
is blocked by SYS.2.1.A18 Using Encrypted Communication (S)
is blocked by SYS.2.1.A20 Protecting the Administration Process for Clients (S)
is blocked by SYS.2.1.A21 Preventing Unauthorised Use of Computer Microphones and Cameras (S)
is blocked by SYS.2.1.A28 Encryption of Clients (H)
is blocked by SYS.2.1.A35 Active Administration of Root Certificates (H)
is blocked by SYS.2.2.3.A1 Planning the Use of Cloud Services for Windows 10 (B)
is blocked by SYS.2.2.3.A14 Use of the Voice Assistant Cortana [User] (S)
is blocked by SYS.3.2.1.A16 Disabling Unused Communication Interfaces [User] (S)
is blocked by SYS.3.2.1.A19 Use of a Voice Assistant (S)
is blocked by SYS.3.2.1.A22 Integrating Mobile Devices into Internal Infrastructure via VPN (S)
is blocked by SYS.3.2.1.A34 Configuration of the DNS Server Used (S)
is blocked by SYS.3.2.2.A21 Administration of Certificates (S)
is blocked by SYS.3.2.2.A22 Remote Deletion and Decommissioning of End Devices (S)
is blocked by SYS.3.3.A1 Security Guidelines and Rules for the Use of Mobile Phones (B)
is blocked by SYS.3.3.A3 Raising Employee Awareness and Providing Training on the Use of Mobile Telephones (B)
is blocked by SYS.3.3.A4 Decommissioning and Properly Disposing of Mobile Telephones and the Memory Cards Used in Them (B)
is blocked by SYS.3.3.A8 Use of the Wireless Interfaces of Mobile Telephones [User] (S)
is blocked by SYS.3.3.A10 Secure Data Transmission via Mobile Phones [User] (S)
is blocked by SYS.3.3.A15 Protection Against Eavesdropping on Indoor Conversations Using Mobile Telephones (H)
is blocked by SYS.4.1.A7 Restriction of Remote Administrative Access to Printers, Copiers, and All-in-One Devices (S)
is blocked by SYS.4.1.A11 Restricting the Connection of Printers, Copiers, and All-in-One Devices (S)
is blocked by SYS.4.3.A8 Using a Secure Operating System for Embedded Systems [Developer, Planner, Procurement Department] (S)
is blocked by SYS.4.3.A9 Use of Cryptographic Processors or Coprocessors in Embedded Systems [Developer, Planner, Procurement Department] (S)
is blocked by SYS.4.3.A11 Secure Disposal of Embedded Systems (S)
is blocked by SYS.4.3.A13 Use of a Certified Operating System [Developer, Planner, Procurement Department] (H)
is blocked by SYS.4.3.A18 Resistance of Embedded Systems to Side-Channel Attacks [Developer, Procurement Department] (H)
is blocked by IND.1.A5 Development of a Suitable Zone Concept [Planner] (S)
is blocked by IND.2.1.A4 Disabling or Uninstalling Unused Services, Functions, and Interfaces [Maintenance Personnel, OT Operations] (B)
is blocked by IND.2.1.A6 Network Segmentation [OT Operations, Planner] (B)
is blocked by IND.2.1.A13 Appropriate Commissioning of ICS Components [OT Operations] (S)
is blocked by IND.2.7.A1 Recording and Documentation [Planner, Maintenance Personnel] (B)
is blocked by IND.2.7.A2 Specified Use of Hardware and Software Components [Maintenance Personnel] (B)
is blocked by IND.2.7.A4 Making Information Security an Integral Part of Functional Safety Management [ICS Information Security Officer] (S)
is blocked by IND.2.7.A6 Secure Planning and Specification of SIS [Planner, Maintenance Personnel, ICS Information Security Officer] (S)
is blocked by IND.2.7.A7 Separation and Independence of the SIS from the Environment [Planner, Maintenance Personnel] (S)
is blocked by IND.2.7.A9 Protection of Data and Signal Connections [Planner, Maintenance Personnel, ICS Information Security Officer] (S)
is blocked by IND.2.7.A11 Dealing with Integrated Systems [Planner, Maintenance Personnel, ICS Information Security Officer] (S)
is blocked by NET.1.1.A7 Protection of Sensitive Information (B)
is blocked by NET.1.1.A34 Use of Cryptographic Methods at the Network Level (H)
is blocked by NET.1.2.A9 Protection of Network Management Communication and Access to Network Management Tools (B)
is blocked by NET.1.2.A10 Limitation of SNMP Communication (B)
is blocked by NET.1.2.A14 Detailed and Implementation Planning (S)
is blocked by NET.1.2.A21 Decoupling of Network Management Communication (S)
is blocked by NET.1.2.A31 Basic Use of Secure Protocols (H)
is blocked by NET.2.1.A2 Selection of a Suitable WLAN Standard [Planner] (B)
is blocked by NET.2.1.A3 Selection of Suitable Crypto Methods for WLAN [Planner] (B)
is blocked by NET.2.1.A5 Secure Basic Configuration of Access Points (B)
is blocked by NET.2.1.A6 Secure Configuration of WLAN Infrastructure (B)
is blocked by NET.2.1.A7 Setting Up a Distribution System [Planner] (B)
is blocked by NET.2.1.A8 Codes of Conduct in the Event of WLAN Security Incidents (B)
is blocked by NET.2.1.A9 Secure Connection of WLANs to a LAN [Planner] (S)
is blocked by NET.2.1.A10 Drawing Up a Security Policy for WLAN Operation (S)
is blocked by NET.2.1.A15 Using a VPN to Secure WLANs (H)
is blocked by NET.2.1.A16 Additional Protection When Connecting WLANs to a LAN (H)
is blocked by NET.2.1.A17 Protecting Communication Between Access Points (H)
is blocked by NET.2.2.A1 Creating a User Policy for WLAN [IT Operation Department] (B)
is blocked by NET.2.2.A2 Awareness and Training of WLAN Users [Supervisor, IT Operation Department] (B)
is blocked by NET.2.2.A3 Safeguarding WLAN Usage in Hotspots [IT Operation Department] (B)
is blocked by NET.3.1.A4 Protection of Administration Interfaces (B)
is blocked by NET.3.1.A5 Protection Against Fragmentation Attacks (B)
is blocked by NET.3.1.A6 Emergency Access to Routers and Switches (B)
is blocked by NET.3.1.A9 Operational Documentation (B)
is blocked by NET.3.1.A11 Procurement of a Router or Switch (S)
is blocked by NET.3.1.A12 Drawing Up a Configuration Checklist for Routers and Switches (S)
is blocked by NET.3.1.A13 Administration Using a Separate Management Network (S)
is blocked by NET.3.1.A14 Protection Against Misuse of ICMP Messages (S)
is blocked by NET.3.1.A22 Contingency Planning for Routers and Switches (S)
is blocked by NET.3.1.A23 Audits and Penetration Tests (S)
is blocked by NET.3.1.A24 Use of Network Access Controls (H)
is blocked by NET.3.1.A25 Advanced Integrity Protection for Configuration Files (H)
is blocked by NET.3.1.A26 High Availability (H)
is blocked by NET.3.1.A27 Bandwidth Management for Critical Applications and Services (H)
is blocked by NET.4.1.A5 Logging for Telecommunications Systems (B)
is blocked by NET.4.1.A7 Suitable Installation of the Telecommunications System (S)
is blocked by NET.4.1.A8 Limitation and Blocking of Unnecessary or Security-Critical Features (S)
is blocked by NET.4.1.A17 Maintenance of Telecommunications Systems (S)
is blocked by NET.4.2.A1 Planning the Use of VoIP (B)
is blocked by NET.4.2.A7 Drawing up a Security Policy for VoIP (S)
is blocked by NET.4.2.A8 Encryption of VoIP (S)
is blocked by NET.4.2.A9 Selection of Suitable VoIP Components (S)
is blocked by NET.4.2.A13 Firewall Requirements When Using VoIP (S)
is blocked by NET.4.2.A14 Encryption of Signalling (H)
is blocked by INF.2.A23 Appropriate Design of Data Centre Cabling [Building Services] (H)
is blocked by INF.7.A1 Suitable Selection and Use of an Office Room [Supervisor] (B)
is blocked by INF.7.A7 Suitable Storage of Official Documents and Storage Media [Employee, Building Services] (S)
is blocked by INF.8.A3 Protection Against Unauthorised Access to the Home Workplace (B)
is blocked by INF.8.A4 Suitable Configuration of the Home Workplace (S)
is blocked by INF.8.A6 Handling Official Documents with Increased Protection Needs at the Home Workplace (H)
is blocked by INF.10.A4 Planning Meeting, Event, and Training Rooms (S)
is blocked by INF.10.A6 Configuring Secure Network Access [IT Operation Department] (S)
is blocked by INF.10.A9 Resetting Training and Presentation Computers [IT Operation Department] (H)
is blocked by INF.10.A10 Ban on Carrying Mobile Phones (H)
is blocked by INF.11.A15 Physical Protection of Interfaces [IT Operation Department, Process Owner] (H)
is blocked by INF.12.A3 Proper Installation [IT Operation Department, Building Services] (B)
is blocked by INF.12.A9 Fire Prevention in Trays [Building Services] (S)
is blocked by INF.12.A10 Documentation and Labelling of Cabling [IT Operation Department, Building Services] (S)
is blocked by INF.12.A11 Neutral Documentation in Distributors [IT Operation Department, Building Services] (S)
is blocked by INF.12.A15 Material Protection of Cabling [IT Operation Department, Building Services] (H)
is blocked by INF.12.A16 Use of Cabinet Systems [Building Services] (H)
is blocked by INF.13.A11 Adequate Hardening of Systems in TBM (S)
is blocked by INF.13.A13 Secure Connection of Restricted Trusted Systems in TBM (S) [Planner]
is blocked by INF.13.A26 Securing BIM (H) [Planner]
is blocked by INF.14.A3 Secure Connection of Building Services and Building Services Systems (B)
is blocked by INF.14.A11 Securing Freely Accessible Ports and Access Points in BACS (S) [Planner]
is blocked by INF.14.A12 Use of Secure Transmission Protocols for BACS (S)
is blocked by INF.14.A15 Security of BACS-Specific Networks (S)
is blocked by INF.14.A16 Securing Wireless Communication in BACS Networks (S) [Planner]
is blocked by INF.14.A17 Securing Mobile Communications in BACS Networks (S) [Planner]
is blocked by INF.14.A18 Secure Integration of BACS-External Systems (S)
is blocked by INF.14.A20 Avoiding Broadcast Communication in BACS Networks (S) [Planner]
is blocked by INF.14.A28 Physical Separation of BACS (H) [Planner]
is blocked by INF.14.A29 Separation of Individual Building Services Systems (H)