2. Examples of TEMPEST risks and issues
As mentioned above, one of the mainstays of TEMPEST protection is the evaluation of equipment handling sensitive information (known as "Qualification" for the complete testing of equipment according to the applicable TEMPEST standard).
To give the reader an idea of what these measurements lead to, we give a few examples of SPCs demonstrated on various pieces of equipment (which have had to be modified to comply with TEMPEST standards), either in radiation or in conduction on the equipment's "black" wired link. The signals intercepted can be of any type: video, audio, Ethernet, USB, etc. Please refer to 3.3
The Ultimate Scientific and Technical Reference
This article is included in
Safety and risk management
This offer includes:
Knowledge Base
Updated and enriched with articles validated by our scientific committees
Services
A set of exclusive tools to complement the resources
Practical Path
Operational and didactic, to guarantee the acquisition of transversal skills
Doc & Quiz
Interactive articles with quizzes, for constructive reading
Examples of TEMPEST risks and issues
Phenomenology TEMPEST
Bibliography
Standards and norms
NATO TEMPEST test standard: SECAN Doctrine and Information Publication (SDIP 27), TEMPEST Requirements and Evaluation Procedures.
TEMPEST UE test standard: Information Assurance Security Guidelines (IASG 7-03), TEMPEST Requirements and Evaluation Procedures.
TEMPEST Zoning Directive France: Secrétariat Général de la Défense et de la Sécurité Nationale (SGDSN)/Agence...
Directory
Organizations – Federations – Associations (non-exhaustive list)
French Information Systems Security Agency (ANSSI) https://cyber.gouv.fr
The Ultimate Scientific and Technical Reference
