Introduction to TEMPEST protection for sites and installations

Goals

The objectives of the training Introduction to TEMPEST protection for sites and installations :

Upon completion of this training, participants will be able to design an installation or site layout that complies with French or NATO electromagnetic countermeasures (TEMPEST) regulations.

The objectives of this training course are to:
1. Understand the TEMPEST threat.
2. Learn about French and NATO regulations regarding electromagnetic counter-compromise.
3. Design an installation or site layout that complies with these regulations.

Session date:
• 21/09/2027 - Trappes
Contact: +33 04 76 49 76 76 | formation@sopemea.fr

Financial details:
• Financial assistance options based on your status (Company, Employee, Job Seeker) through your OPCO, France Travail, or any other funding agency
• Not eligible for the Professional Training Account (CPF)

Program

• Introduction: some definitions

ο        Compromise (or: Compromission)

ο        Anti-compromise (or: Anti-compromission)

ο        Electromagnetic compromise

ο        TEMPEST

ο        Security zone

ο        Uncontrolled zone/public domain

ο        Coupling zone

ο        Parasitic Signals

ο        Compromising Emanations (or: Compromising Parasitic Signals)

ο        Examples of Compromising Emanations



• The TEMPEST threat: propagation modes

ο        Radiation

ο        Conduction

ο        Coupling

ο        Crosstalk

ο        Leakage paths

ο        Coupling zone



• Standardization: France/NATO

ο        ANSSI: the national TEMPEST authority

ο        Classification and protection of national defense secrecy

ο        Protection against Compromising Emanations

§          II n°920/SGDN/DCSSI

§          Recommendation n° 901/SGDSN/ANSSI

ο        Interministerial Instruction 300/SGDSN/ANSSI

ο        Installation Directive 485 for information sites and systems

ο        TEMPEST Zoning Directive n° 495

ο        Evolution of NATO regulation

ο        SDIP 27

ο        SDIP 28

ο        SDIP29

ο        COMSEC/SECAN/SDIP



• TEMPEST Protection of Systems and Installations

ο        Red/Black Concept

ο        Principle of TEMPEST protection

ο        TEMPEST certified equipment

ο        Faraday cages

ο        Zoning

ο        Presentation of the principle of Directive 485

ο        Room zoning concept

ο        Example of room zoning

ο        Equipment zoning concept

ο        TEMPEST Level A

ο        TEMPEST Level B

ο        TEMPEST Level C

ο        COTS

ο        TEMPEST Level D

ο        Principle of equipment installation

ο        TEMPEST Zoning

ο        Minimum distance between equipment

ο        Installation requirements for Red equipment

ο        Reminder on equipment coupling zones

ο        Cabling treatment

ο        Accidental conductors

ο        Leakage paths

ο        Installation rules for equipment handling Secret information

ο        Installation rules for equipment handling Top Secret information

ο        Treatment of radio transmitters

ο        Power supply treatment

ο        Filters

ο        Faraday cages

ο        Optical fibers

ο        Multi-context installations

ο        France/NATO

ο        France/EU…

ο        Tactical installations

ο        Vehicles

ο        Aircraft

ο        Ships…

ο        Special case of deviations from the standard

ο        Hardening methodology

ο        Study phase

ο        Data collection

ο        Room zoning

ο        Inventory of information classes

ο        Inventory of networks

ο        Inventory of Red/Black equipment

ο        Inventory of emitters

ο        Inventory of signals

ο        Data analysis

ο        Room zoning

ο        Analysis of coupling paths

ο        Equipment placement

ο        Inventory of leakage paths

ο        Risk matrix

ο        Risk mitigation

ο        Treatment of leakage paths

ο        Implementation phase

ο        Definition of installation rules

ο        Infrastructures

ο        Equipment placement in racks

ο        Rack placement in rooms

ο        Regular inspections

ο        Validation phase

ο        Collection and compilation of evidence

ο        Supplementary tests

ο        Description of documents to be provided



• TEMPEST Hardening of Equipment

ο        General principles

ο        General protection rules



• TEMPEST Testing

ο        Zoning tests

ο        Instruction 495

ο        SDIP29

ο        Evaluation by distance

ο        Principle of zoning measurement

ο        Examples of measuring equipment

ο        Example results

ο        Testing of equipment according to SDIP27

ο        Equipment Description Form (EDF)

ο        Preliminary TEMPEST test plan

ο        TEMPEST test plan

ο        TEMPEST test matrix

ο        Special case of Radio Emitters

ο        TEMPEST testing on production equipment



• Case Study (the case study presented will depend on the needs of the participants)

ο        Building installation

ο        System installation in a restricted space