Strengthening WLAN Security with Authentication, Key Management, and Encryption

In this lesson, we’ll dive into the core concepts of WLAN security: authentication, key management, and encryption. After reviewing vulnerabilities that can threaten a WLAN, we’ll explore strategies to enhance its security. The primary principles we’ll cover include the CIA Triad (Confidentiality, Integrity, and Availability) and AAA (Authentication, Authorization, and Accounting), alongside key management and encryption techniques.

Introduction to CIA in Network Security

The CIA Triad – Confidentiality, Integrity, and Availability – forms the foundation of network security across all technologies, whether it’s WLAN, Ethernet, or any other networking type.

1. Confidentiality

Confidentiality ensures that private data remains secure and unseen by unauthorized users when transmitted over a network. It’s particularly important for WLANs since they are vulnerable to interception. Confidentiality requires that data be encrypted, making it readable only to the sender and the authorized receiver. Encryption involves transforming data into an unreadable format, which only those with the correct encryption key can decode.

For example, imagine you want to transmit “Hello, how are you?” to someone securely. Instead of sending the phrase directly, you and the receiver might agree to use a code, such as “The sun is nice,” which only you two understand. If an intruder intercepts this message, they won’t understand its real meaning.

2. Integrity

Integrity ensures that data sent from one point to another remains unchanged during transmission. To maintain data integrity, WLANs often use hashing algorithms. Hashing involves generating a unique hash (or digital fingerprint) from the data before it’s sent. The receiver can rehash the data upon receipt and compare the hashes. If they match, it confirms that the data hasn’t been tampered with.

For instance, if you send data from point A to point B, a hashing algorithm can confirm that the data arrives exactly as it was sent, with no alterations made during transit. This ensures that the information maintains its accuracy and authenticity.

3. Availability

Availability ensures that data is accessible to authorized individuals at the right time and place. In WLANs, availability means ensuring that authorized users can connect to and use the network resources as needed. This involves network management strategies to prevent downtime, overloading, or denial-of-service (DoS) attacks, which can hinder legitimate access.