Elementary Information Security, 3rd Edition

▶ 13.6 Cryptographic Security Requirements

We began the chapter with a review of network security risks, and we end with an overview of objectives tied to those security risks. This section summarizes security requirements that apply network cryptography to those objectives.

1. Protect selected network traffic from sniffing or eavesdropping.

2. Allow filtering and review of network contents. This is the opposite of preventing sniffing. If we allow sniffing, we also allow filtering content review.

3. Automate the encryption decision for users.

4. Permit or deny internet access to users.

5. Provide end-to-end crypto.

6. Simplify key management.

The specific network crypto solutions examined include the following:

• ■   Link layer encryption on a wireless LAN ...