Part 6, free speech and the internet

Question 1

what is

deep packet inspection

Answer 1

this is the process of examining the header and/or the content of a packet. This may be carried out for various reasons such as security, censorship or to identify malware or spam

Question 2

what is

prefix hijacking

and how does golden shield use it

Answer 2

this is at a high level the process of inserting fake routes into a routers routing table. Golden shield uses this technique to either send traffic to fake ip addresses or to have traffic analysed by other parts of the golden shield network

Question 3

1. golden shield will use deep packet inspection and examine the packet for 15,000 keywords and phrases deemed objectionable by the chinses government
2. if any keyword or phrase is found then golden shield will send reset connection packets to the client. in turn dropping the connection

note

the reset connection packet sent by golden shield to the client will also be impersonating the original servers ip address so that it does not look like the connection was tampered with but instead came fom the server making it seem like a bad connection

Answer 3

in two steps explain how golden shield might decide to

reset a connection

Question 4

this includes:

1. ip blocking
2. DNS injection
3. resetting connections
4. prefix hijacking

Answer 4

what are 4 methods that golden shield employs in order to survey and censor

Question 5

this is the process of examining the header and/or the content of a packet. This may be carried out for various reasons such as security, censorship or to identify malware or spam

Answer 5

what is

deep packet inspection

Question 6

what is

golden shield

and what dates was it first implemented and then rolled out across the country

Answer 6

this is a surveillance and censorship system for internet requests in china. It was first implemented in china in 1998 and became universal throughout china in 2008

Question 7

this is at a high level the process of inserting fake routes into a routers routing table. Golden shield uses this technique to either send traffic to fake ip addresses or to have traffic analysed by other parts of the golden shield network

Answer 7

what is

prefix hijacking

and how does golden shield use it

Question 8

in 3 steps how does golden shield carry out

DNS injection

Answer 8

it carrys this out in the following steps:

1. if the DNS request is outside china the packet is duplicated. with the original then being sent to its original destination while the other is routed to a chinese DNS server
2. the chinese DNS server uses deep packet inspection to see if the packet contains a blacklisted URL
3. if the URL requested is blacklisted the chinses DNS server sends a fake ip address back to the client

note

because the DNS server is located in china it nearly always completes the DNS request before the DNS server outside china

Question 9

in two steps explain how golden shield might decide to

reset a connection

Answer 9

1. golden shield will use deep packet inspection and examine the packet for 15,000 keywords and phrases deemed objectionable by the chinses government
2. if any keyword or phrase is found then golden shield will send reset connection packets to the client. in turn dropping the connection

note

the reset connection packet sent by golden shield to the client will also be impersonating the original servers ip address so that it does not look like the connection was tampered with but instead came fom the server making it seem like a bad connection

Question 10

it carrys this out in the following steps:

1. if the DNS request is outside china the packet is duplicated. with the original then being sent to its original destination while the other is routed to a chinese DNS server
2. the chinese DNS server uses deep packet inspection to see if the packet contains a blacklisted URL
3. if the URL requested is blacklisted the chinses DNS server sends a fake ip address back to the client

note

because the DNS server is located in china it nearly always completes the DNS request before the DNS server outside china

Answer 10

in 3 steps how does golden shield carry out

DNS injection

Question 11

how is golden shield intergrated into chinas infrastructure

Answer 11

the system is connected to the routers of all the Internet Service Providers (ISPs) in china meaning that all traffic can be seen by the system

Question 12

this is a surveillance and censorship system for internet requests in china. It was first implemented in china in 1998 and became universal throughout china in 2008

Answer 12

what is

golden shield

and what dates was it first implemented and then rolled out across the country

Question 13

what are 4 methods that golden shield employs in order to survey and censor

Answer 13

this includes:

1. ip blocking
2. DNS injection
3. resetting connections
4. prefix hijacking

Question 14

the system is connected to the routers of all the Internet Service Providers (ISPs) in china meaning that all traffic can be seen by the system

Answer 14

how is golden shield intergrated into chinas infrastructure