International agreement reached controlling export of mass and intrusive surveillance technology – Edin Omanovic – December 9, 2013

Two new categories of surveillance systems were added into the dual-use goods and technologies control list of the Wassenaar Arrangement last week in Vienna, recognising for the first time the need to subject spying tools used by intelligence agencies and law enforcement to export controls. …

“Intrusion Software”

The UK proposal was aimed at controlling what they called “Advanced Persistent Threat Software and related equipment (offensive cyber tools)”. It’s now clear that what they meant by this is malware and rootkits, which governments can use to extract data from and take control of a device.

The term used “intrusion software”, echoes the “offensive IT intrusion” marketing lines used by FinFisher and others and defines itself as:

“Software” specially designed or modified to avoid detection by ‘monitoring tools’, or to defeat ‘protective countermeasures’, of a computer or network capable device, and performing any of the following:
a. The extraction of data or information, from a computer or network capable device, or the modification of system or user data; or
b. The modification of the standard execution path of a program or process in order to allow the execution of externally provided instructions.

“IP network surveillance systems”

The French proposal targeting “IP network surveillance systems” is likely to be aimed at controlling general traffic analysis systems such as Deep Packet Inspection (DPI) items, which can classify and collect information flowing through a network. IP (Internet protocol) is one of the core standards upon which today’s communications infrastructure is built. Today IP networks are used to carry information from all our network devices including laptops and mobiles right the way around the world. Your online searches, emails and VoIP calls all transmit through these networks and protocols. The interception of these communications lies at the heart of many mass surveillance systems. …

Read more: