Black Hat: Researcher creates Net neutrality test
The technique will eventually be offered as a free software tool
IDG News Service - A Seattle-based security researcher has devised a way to test for Net neutrality.
Dan Kaminsky will share details of this technique, which will eventually be rolled into a free software tool, today at the Black Hat USA security conference in Las Vegas. The software can tell whether computers are treating some types of TCP/IP traffic better than others -- dropping data that is being used in voice-over-IP (VoIP) calls or treating encrypted data as second-class, for example.
The U.S. Congress is presently debating whether to enact Net neutrality laws that would prevent this from happening. Net neutrality would force Internet service providers such as AT&T Inc. and Comcast Corp. to give all Internet traffic the same quality of service. Advocates of these laws say they are essential to preserving the openness that has made the Internet a success. Broadband providers say that such laws could prevent them from developing a new generation of services.
Kaminsky calls his technique "TCP-based active probing for faults." He says that the software he's developing will be similar to the Traceroute Internet utility that is used to track what path Internet traffic takes as it hops between two machines on different ends of the network.
But unlike Traceroute, Kaminsky's software will be able to make traffic appear as if it is coming from a particular carrier or is being used for a certain type of application, like VoIP. It will also be able to identify where the traffic is being dropped and could ultimately be used to finger service providers that are treating some network traffic as second-class.
At this week's Black Hat conference, Kaminsky will show how to perform a basic version of TCP-based Active Probing using currently available tools. He said in an interview yesterday that he will release his own, more sophisticated software sometime within the next six months as part of a free suite of tools called Paketto Keiretsu Version 3.
The security researcher said he is curious to see what people do with his software. "People are going to start looking [at networks] and who knows what they are going to find," he said.
Already, a handful of carriers have tried blocking certain types of Internet services. In March 2005, the Federal Communications Commission fined Madison River Communications Corp. $15,000 for blocking Vonage Holdings Corp.'s VoIP service. Since then, the FCC has changed its broadband carrier requirements, and it's unclear whether it would again issue a similar fine.
Kaminsky said he believes that Net neutrality will eventually become law and that the type of software he is developing will help keep the carriers honest. "If you're going to enforce by law that networks be neutral, the question becomes, 'How do you test for this?'" he said. "I'm going to make sure that the tools are going to be in place."
Kaminsky plans to post information on TCP-based active probing for faults at www.doxpara.com.
- IT Blogwatch Black Hat net neutrality test (and odd Google Earth uses)
- C.J. Kelly: 'Go West' -- Don't go wireless at Black Hat
- IT Blogwatch: Net neutrality: Senate sedated (and expensive dialog box)
- C.J. Kelly: I'm going to Black Hat!
- Silicon Valley's 19 Coolest Places to Work
- Is Windows 8 Development Worth the Trouble?
- 8 Books Every IT Leader Should Read This Year
- 10 Hot Hadoop Startups to Watch
- Slideshow: 7 security mistakes people make with their mobile device
- iOS vs. Android: Which is more secure?
- 11 sure signs you've been hacked
This state transportation department uses computer science students from a local university as programming interns, and everyone is happy with the arrangement -- until one intern learns how to bring down the mainframe.
- IT Certification Study Tips
- Register for this Computerworld Insider Study Tip guide and gain access to hundreds of premium content articles, cheat sheets, product reviews and more.
- Changing the Way Government Works: Four Technology Trends that Drive Down Costs and Increase Productivity
- This paper discusses four technology-based approaches to improving processes and increasing
productivity while driving down department and agency costs.
- Infographic: Converged Infrastructure Benefits
- This Infographic quantifies the savings organizations are realizing from increased deployment speed, higher availability, and lower annual costs.
- CIOs Deliver Productivity Breakthroughs with Intelligent Digital Signage
- Retailers have long recognized the influence that digital signage provides over a shopper's point-of-purchase decision making process.
- Going Paperless? Here's What You Need to Think About
- As makers of some of the world's most popular PDF solutions, we often consult with businesses & governmental agencies that have the goal...
- The Big Data Opportunity for HR and Finance
- If CEOs, CFOs, CIOs, and CHROs want to drive their businesses forward, they will need to quickly recognize the enormous value of big... All Government IT White Papers
- Top 4 Digital Signage Fails Join RMG Networks for a look at four of the most common reasons digital signage fails in corporate businesses. Learn about strategies to...
- Building Tomorrow's Infrastructure Listen to this podcast to discover how Crider Foods worked with PC Connection to update their IT infrastructure, while maintaining compliance and control.
Enhance Your Virtualization Infrastructure With IBM and Vmware
Date: Wednesday, May 14, 2014, 1:00 PM EDT
Virtualization technology is now expanding beyond the server compute elements to encompass networking and storage...
Transforming Finance, Procurement and Supply Chain Effectiveness with Cross-Functional Analytics
Date: May 6th, 2014
Time: 1 PM EDT
Attend this Webcast to find out how Oracle's packaged analytic applications enable line-of-business managers to examine all...
- Cloud Knowledge Vault Learn how your organization can benefit from the scalability, flexibility, and performance that the cloud offers through the short videos and other resources...
- All Government IT Webcasts