SORM

The System for Operative Investigative Activities (SORM; ) is the technical specification for lawful interception interfaces of telecommunications and telephone networks operating in Russia. The current form of the specification enables the targeted surveillance of both telephone and Internet communications. Initially implemented in 1995 to allow access to surveillance data for the FSB, in subsequent years the access has been widened to other law enforcement agencies.

The System for Operative Investigative Activities (SORM; ) is the technical specification for lawful interception interfaces of telecommunications and telephone networks operating in Russia. The current form of the specification enables the targeted surveillance of both telephone and Internet communications. Initially implemented in 1995 to allow access to surveillance data for the FSB, in subsequent years the access has been widened to other law enforcement agencies. ==History== ===SORM-1=== SORM was first implemented in 1995, requiring telecommunications operators to install FSB-provided hardware allowing the agency to monitor users' communications metadata and content, including phone calls, email traffic and web browsing activity, despite the low internet penetration rate at the time. ===SORM-2=== In July 1998 the system was replaced by SORM‑2. Under SORM‑2, Russian Internet service providers (ISPs) must install a special device on their servers to allow the FSB to track all credit card transactions, email messages and web use. The device must be installed at the ISP's expense. It has been estimated to cost $10,000–30,000. Other reports note that some ISPs have had to install direct communications lines to the FSB and that costs for implementing the required changes were in excess of $100,000. In July 2000, Russia's Minister of Information Technology and Communications Leonid Reiman issued the order No 130 "Concerning the introduction of technical means ensuring investigative activity (SORM) in phone, mobile and wireless communication and radio paging networks" stating that the FSB was no longer required to provide telecommunications and Internet companies documentation on targets of interest prior to accessing information. In August 2014, SORM-2 usage was extended to monitoring of social networks, chats and forums, requiring their operators to install SORM probes in their networks. ===SORM-3=== A ministerial order from the Russian Ministry of Communications from 16 April 2014 introduced requirements for the new wiretapping system SORM-3. Telecommunications operators were required to install compliant equipment by 31 March 2015. According to regulations of Russian Ministry of Communications, SORM-3 equipment supports the following selectors for targeted surveillance: Single IPv4 or IPv6 address IPv4 or IPv6 networks identified with address mask User ID within telecom operator's system, supporting "*" and "?" as globbing symbols (wildcards) email address, if targeted user connects via POP3, SMTP or IMAP4; connections protected with cryptography are specifically excluded email address, if targeted user connects to a webmail system from a predefined list of services: mail.ru; yandex.ru; rambler.ru; gmail.com; yahoo.com; apport.ru; rupochta.ru; hotbox.ru; again, connections protected with cryptography are specifically excluded User's phone number IMSI IMEI MAC address of user's equipment ICQ UIN The equipment has deep packet inspection (DPI) capability. ==Architecture and deployment== Russia uses deep packet inspection (DPI) on a nationwide scale, with part of the DPI infrastructure used for SORM. Some mobile networks use DPI to additionally filter traffic. The SORM device recommended by the FSB is named Omega. Equipment by Cellebrite appears to be in use. SORM also enables the use of mobile control points, a laptop that can be plugged directly into communication hubs and immediately intercept and record the operator's traffic. Roskomnadzor, a federal executive body responsible for media control, reported that several local ISPs were fined by the government after they failed to install FSB-recommended SORM devices. ==Access by government agencies== On 5 January 2000, during his first week in office, President Vladimir Putin amended the law to allow seven other federal security agencies (next to the FSB) access to data gathered via SORM. The newly endowed agencies included: Russia's tax police Russian Police Federal Protective Service Border patrol and customs Ministry of Internal Affairs Kremlin Regiment Presidential Security Service Parliamentary security services ==Warrant and notification regulations== The acquisition of communications by entitled security services in general requires a court warrant, but at the same time they are allowed to start wiretapping before obtaining such warrant. The warrant is also only required for communications content, but not metadata (communicating parties, time, location etc.), which may be obtained without the warrant. In cases where an FSB operative is required to get an eavesdropping warrant, he is under no obligation to show it to anyone. Telecom providers have no right to demand that the FSB provide a warrant, and are denied access to the surveillance boxes. The security service calls on the special controller at the FSB headquarters that is connected by a protected cable directly to the SORM device installed on the ISP network. Since 2010, intelligence officers can wiretap someone's phones or monitor their Internet activity based on received reports that an individual is preparing to commit a crime. They do not have to back up those allegations with formal criminal charges against the suspect. According to a 2011 ruling, intelligence officers have the right to conduct surveillance of anyone who they claim is preparing to call for "extremist activity". ==See also== Lawful interception Mass surveillance in Russia Sovereign Internet Law Vyacheslav Volodin, known for using spy software Prisma ( ) Igor Sechin, known for using Prisma 2011–2013 Russian protests ("Snow Revolution") Internet Research Agency Special Communications Service of Russia (Spetssvyaz of Russia) Berserk Bear ==References== ==External links== ===Media=== Russian Spies, They've Got Mail - Regulations Allow Security Services to Tap Into Systems of Internet Providers. Sharon LaFraniere, Washington Post, March 7, 2002 Russia: Surveillance of communications. Statewatch, June 2000. New KGB takes internet by SORM, Mother Jones Magazine, February 2000. SORM - Russia's big brother.... , Issue #21 , Numbers & Oddities Newsletter, 1999 December 20 ===Official instructions=== Об утверждении типовых Требований к плану мероприятий по внедрению технических средств для проведения оперативно-разыскных мероприятий 15 January 2008 Об утверждении Требований к сетям электросвязи для проведения оперативно-разыскных мероприятий. Часть I. Общие требования 16 January 2008

Text derived from https://en.wikipedia.org/w/index.php?oldid=1375696515 under CC BY-SA 4.0; modifications have been made.