2 cissp ® Official Study Guide Eighth Edition

 ISAKMP 
The Internet Security Association and Key Management Protocol (ISAKMP) provides 
background security support services for IPsec by negotiating, establishing, modifying, 
and deleting security associations. As you learned in the previous section, IPsec relies on a 
system of security associations (SAs). These SAs are managed through the use of ISAKMP. 
There are four basic requirements for ISAKMP, as set forth in Internet RFC 2408: 
■
Authenticate communicating peers 
■
Create and manage security associations 
■
Provide key generation mechanisms 
■
Protect against threats (for example, replay and denial-of-service attacks)
 Wireless Networking 
The widespread rapid adoption of wireless networks poses a tremendous security risk. Many 
traditional networks do not implement encryption for routine communications between 
hosts on the local network and rely on the assumption that it would be too diffi cult for an 
attacker to gain physical access to the network wire inside a secure location to eavesdrop 
on the network. However, wireless networks transmit data through the air, leaving them 
extremely vulnerable to interception. There are two main types of wireless security: 
Wired Equivalent Privacy
Wired Equivalent Privacy (WEP) provides 64- and 128-bit 
encryption options to protect communications within the wireless LAN. WEP is described 
in IEEE 802.11 as an optional component of the wireless networking standard. 
Cryptanalysis has conclusively demonstrated that significant flaws exist 
in the WEP algorithm, making it possible to completely undermine the 
security of a WEP-protected network within seconds. You should never 
use WEP encryption to protect a wireless network. In fact, the use of WEP 
encryption on a store network was the root cause behind the TJX security 
breach that was widely publicized in 2007. Again, you should never use 
WEP encryption on a wireless network.

---

Cryptographic Attacks