Scribd
Upload
5 views2 pages

Network Internet Security Complete Notes

Network and Internet Security encompasses policies and technologies aimed at protecting networks and data from unauthorized access, focusing on the CIA Triad: Confidentiality, Integrity, and Availability. Common threats include malware and DoS attacks, while security methods involve authentication, encryption, and various protocols. Future trends indicate a shift towards AI-driven security and Zero Trust models.

Uploaded by

lalsinfozone
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
5 views2 pages

Network Internet Security Complete Notes

Network and Internet Security encompasses policies and technologies aimed at protecting networks and data from unauthorized access, focusing on the CIA Triad: Confidentiality, Integrity, and Availability. Common threats include malware and DoS attacks, while security methods involve authentication, encryption, and various protocols. Future trends indicate a shift towards AI-driven security and Zero Trust models.

Uploaded by

lalsinfozone
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd

Network & Internet Security – Complete Printable

Notes

1. Introduction
Network and Internet Security refers to the set of policies, practices, devices, protocols, and
technologies designed to protect networks, systems, and data from unauthorized access, misuse,
modification, or disruption. The primary objectives are Confidentiality, Integrity, and Availability (CIA
Triad).

2. Common Threats
Network Threats: Packet sniffing, IP spoofing, ARP poisoning, Man-in-the-Middle attacks,
DoS/DDoS.
Internet Threats: Malware, phishing, ransomware, session hijacking, SQL injection, XSS.

3. Security Methods
Authentication: Password-based, MFA, certificate-based, biometric authentication.
Authorization: RBAC, ABAC, Least Privilege principle.
Encryption: Symmetric (AES), Asymmetric (RSA, ECC), Data-at-rest and Data-in-transit protection.
Integrity: Hashing (SHA), HMAC, Digital signatures.

4. Security Protocols
Application/Transport Layer: HTTPS, SSL/TLS, SSH, FTPS, SMTPS.
Network Layer: IPsec (AH, ESP, IKE) – Transport and Tunnel modes.
Wireless: WEP (obsolete), WPA, WPA2, WPA3.
Email & DNS: SPF, DKIM, DMARC, DNSSEC.

5. Security Devices
Firewall: Packet filtering, Stateful, Application, Next-Generation Firewall.
IDS/IPS: Intrusion detection and prevention systems.
Proxy Server: Traffic control, anonymity, logging.
VPN: Encrypted tunnels – Site-to-Site and Remote Access VPN.
NAC: Controls device and user access.

6. Security Policies & Governance


Security policies define acceptable use, password rules, remote access, and BYOD guidelines. Risk
management involves identifying assets, threats, vulnerabilities, and applying controls. Common
standards include ISO 27001, NIST, PCI-DSS, and HIPAA.

7. Network Architecture & Models


DMZ: Isolates public-facing servers from internal networks.
Zero Trust: Never trust, always verify – continuous authentication and micro-segmentation.
8. Monitoring & Incident Response
Security monitoring uses logs, SIEM systems, and traffic analysis. Incident response includes
detection, containment, eradication, recovery, and lessons learned.

9. End-User Best Practices


Use strong passwords, enable MFA, keep systems updated, avoid phishing links, and use secure
Wi-Fi and VPNs.

10. Future Trends


AI-driven security, Zero Trust adoption, post-quantum cryptography, SASE architecture, and
cloud-native security solutions.

You might also like