Eavesdropping
What is Eavesdropping?
The interception of private communications or data transmissions without the knowledge or consent of the parties involved, a form of passive attack.
Frameworks that govern eavesdropping
What the standards actually require on eavesdropping
Requirements naming eavesdropping across 6 standards, quoted from the control text.
A person must not knowingly and intentionally use or disclose information that the person knows or reasonably should know was obtained from a private conversation or private electronic communication in breach of the Article, unless all parties consent.
illinois-eavesdropping-act-720-ilcs-5-article-14::14-2(a)(5) · 14-2(a)(5) No use or disclosure of information obtained by unlawful eavesdropping →A person must not trespass on property owned or controlled by another person in order to subject that person to eavesdropping or surveillance. Violation is a misdemeanor.
michigan-eavesdropping-act-mcl-750-539a-to-750-539j::539b · 539b Do not trespass to subject a person to eavesdropping or surveillance →A person who holds information about the existence or contents of an eavesdropping warrant under Criminal Procedure Law article 700, or about an application for one, may not disclose it except as CPL 700.65 allows, to agencies specifically authorised by law, i...
new-york-penal-law-article-250-offenses-against-the-right-to-privacy-eavesdropping-and-unlawful-surveillance::250.20 · 250.20 Do not divulge the existence or contents of an eavesdropping warrant outside the permitted channels →The authentication mechanism for IEC 60870-5 and its derivatives (DNP3 among them) addresses only spoofing, tampering, replay and, with the 2023 edition's encryption option, eavesdropping, as defined in part 2;
iec-62351-power-systems-communication-security::5:5.2 · Part 5, 5.2: threats addressed (spoofing, tampering, replay, eavesdropping) →A person may not, intentionally and without the consent of all parties to a confidential communication, use an electronic amplifying or recording device to eavesdrop on or record it, whether the parties are together in person or talking by telegraph, telephone...
california-penal-code-sections-632-and-632-7-recording-confidential-communications::632(a) · 632(a) Obtain the consent of all parties before recording or eavesdropping on a confidential communication →Adversary-operated base stations and air-interface eavesdropping that can intercept, redirect, or degrade subscriber traffic.
SP800-187-THR-ROGUE-BS · Threat: Rogue Base Stations and Eavesdropping →Questions people ask about eavesdropping
What is Eavesdropping?
Why is Eavesdropping important for compliance?
Which compliance frameworks address Eavesdropping?
Where can I learn more about Eavesdropping?
See how Eavesdropping applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.