Control Strategy ClientServiceTLS

URI: CSG-ClientServiceTLS

Package: Network

< prev | next >

Description: Transport layer security is implemented by both Client and Service for communication between them. This prevents passive snooping in the network, including gateway devices, but it does not prevent service impersonation attacks. That can be prevented by also using service authentication via a trusted key (e.g. X.509 or equivalent).

Blocked Threats (1)

CC.C.CCCSCSoAC.3

Communications intercepted between Client and Service: if a network communication path used by Client and Service is subject to snooping, then communications between Client and Service can be intercepted.