1.

Introduc on to Network Security: Threats and Vulnerabili es

VIVEKANANDA GLOBAL UNIVERSITY
DEPARTMENT OF COMPUTER SCIENCE AND APPLICATIONS 1.1 What is Network Security?
Network Security refers to the set of policies, technologies, procedures, and prac ces
designed to protect computer networks and data from unauthorized access, misuse,
LECTURE NOTES a acks, damage, or disrup on.
In today’s digital environment, networks carry:
COMPUTER NETWORKS  Personal informa on
Financial data
UGCSA211 

 Business secrets
 Government and ins tu onal records
Protec ng this data from cyber threats is a cri cal requirement.
Network security ensures that:
 Only authorized users can access data
 Data is not altered or destroyed unlawfully
 Network services remain available to legi mate users
MODULE ­ 5

NAME OF ThE MODULE NETWORK SECURITY

1. Introduction to Network Security: Threats and
Vulnerabilities
2. Security Services
3. Confidentiality, Integrity, Availability
4. Security Mechanisms: Cryptography
MODULE CONTENT 5. Firewalls
6. Intrusion Detection Systems (IDS)
7. Virtual Private Networks (VPNs)
8. Secure Protocols: HTTPS
9. SSL/TLS
10. IPSec

NAME OF hOD MR. RAKESh ShARMA

NAME OF LECTURER MR. NITIN MAThEW VARGhESE

1.4 Types of Network Security Threats

1. Malware
Malware is malicious so ware designed to damage or disrupt systems.
Types include:
 Virus – A aches to files and spreads when executed
 Worm – Self-replicates across networks
 Trojan Horse – Appears legi mate but performs malicious ac ons
 Ransomware – Encrypts data and demands payment

2. Phishing
Phishing is an a ack where a ackers trick users into revealing:
 Passwords
 Credit card details
 Login creden als
This is o en done using fake emails or websites that appear genuine.

1.2 Why Network Security is Important

Network security is important because: 3. Denial of Service (DoS) and Distributed DoS (DDoS)

 Most systems are connected to the Internet In a DoS a ack, a ackers flood a network or server with excessive traffic, making it
unavailable to legi mate users.
 Cyber a acks are increasing in frequency and complexity
In DDoS, the a ack comes from mul ple compromised systems.
 Data breaches cause financial loss and reputa on damage
 Legal and ethical responsibili es require data protec on
4. Unauthorized Access
Without proper security, networks become vulnerable to a acks that can completely
disrupt opera ons. This occurs when an a acker gains access to a system without permission, o en by:
 Guessing passwords

1.3 Security Threats  Exploi ng so ware flaws

Meaning of Threat  Using stolen creden als

A security threat is any poten al danger that can exploit a weakness in a system and cause
harm to data, resources, or services. 5. Man-in-the-Middle A ack
Threats can be inten onal (caused by a ackers) or uninten onal (caused by human error or In this a ack:
system failure).
 The a acker secretly intercepts communica on
 Data is read or modified before reaching the receiver
 5. Lack of encryp on
6. Human errors

Threat vs Vulnerability

Aspect Threat Vulnerability

Meaning Poten al a ack Weakness

Nature External or internal System flaw

Example Hacker Weak password

2. Security Services

2.1 Meaning of Security Services

Security services are mechanisms provided by a network to protect data and resources and
ensure secure communica on.
These services define what security goals must be achieved, while security mechanisms
define how they are achieved.

2.2 Major Security Services

1. Authen ca on
Authen ca on ensures that:
1.5 Vulnerabili es
 The user is who they claim to be
Meaning of Vulnerability
Examples:
A vulnerability is a weakness or flaw in a system that can be exploited by a threat.
 Username and password
While a threat is the danger, a vulnerability is the weakness that allows the danger to
succeed.  Biometrics
 One- me passwords (OTP)

1.6 Common Network Vulnerabili es

1. Weak passwords 2. Authoriza on

2. Outdated so ware Authoriza on determines:

3. Unpatched opera ng systems  What ac ons an authen cated user is allowed to perform

4. Misconfigured firewalls Example:

 Student vs Administrator access rights

3. Confiden ality
Integrity
Confiden ality ensures that:
 Data is accessible only to authorized users Confidentiality
Message
Achieved using: Authentication
Security services
 Encryp on
Nonrepudiation
 Secure communica on protocols
Entity
Authentication

4. Integrity
Computer system
Integrity ensures that:
authentication authorization
 Data is not altered during transmission or storage module module
principal
Techniques used: yes/no
?
ed
aut

yes/no
iz

request
hen

or

 Hash func ons

th
tic

au
?

perform action
 Checksums
OK
guard perform
 Digital signatures action object
audit trail

log
5. Non-Repudia on
Non-repudia on ensures that:
 A sender cannot deny sending a message
CYBERSECURITY -INFOSEC CIA TRIAD
Used in: Safeguarding the accuracy
and completeness of
 Online transac ons information and processing
methods.
 Legal communica ons
Includes the detection of alterations
that occurred in storage, transit,
process....

6. Availability Integrity
Ensuring that information Ensuring that authorized
Availability ensures that: only those have

A
is accessible to users access to

authorized to have information and associated

C
 Network services are accessible when needed access. assets when required.
Information
Includes: Includes controls for:
Achieved through: Protection from
Security
unauthorized access and (System) Acceptable level of performance
Fault tolerance
 Redundancy use; A
Prevention of data loss and
Protecting data on systems,
destruction
in transit, in proces5...
Reliable backups, redundancy,...
 Backup systems Confidentiality Availability

 Protec on against DoS a acks

3. Confiden ality, Integrity, and Availability (CIA Triad) Methods to Ensure Integrity
 Hashing
3.1 Introduc on to CIA Triad  Message authen ca on codes
The CIA Triad is a fundamental model in network security that represents the three core  Digital signatures
security principles:
Example
1. Confiden ality
Marks entered in a database should not be altered without authoriza on.
2. Integrity
3. Availability
3.4 Availability
Every security system aims to balance these three elements.
Meaning
Availability ensures that systems and data are accessible when required by authorized
3.2 Confiden ality users.
Meaning
Confiden ality ensures that sensi ve informa on is not disclosed to unauthorized Threats to Availability
individuals.
 Hardware failures
 DoS/DDoS a acks
Methods to Ensure Confiden ality
 Natural disasters
 Encryp on
 Access control
Methods to Ensure Availability
 Authen ca on
 Backup systems
 Secure protocols
 Redundant servers
Example
 Load balancing
Only authorized staff should access student examina on records.

Example
3.3 Integrity
Online banking services should be available 24/7.
Meaning
Integrity ensures that data remains accurate and unchanged during storage or transmission.
CIA Triad Summary

Principle Focus
Threats to Integrity
Confiden ality Data privacy
 Unauthorized modifica on
 Malware Integrity Data accuracy

 Transmission errors Availability System up me

4. Security Mechanisms: Cryptography

4.1 Introduc on to Cryptography

Cryptography is the science of securing informa on by transforming readable data into an
unreadable format so that only authorized users can access it.
In network security, cryptography is a core security mechanism used to protect data during
transmission and storage.
The word cryptography comes from Greek:
 Kryptos → secret
 Graphia → wri ng
Thus, cryptography literally means secret wri ng. 4.4 Types of Cryptography

4.2 Role of Cryptography in Network Security 4.4.1 Symmetric Key Cryptography

Cryptography helps in achieving: In symmetric cryptography, the same key is used for both encryp on and decryp on.
 Confiden ality – preven ng unauthorized access Working:
 Integrity – preven ng data modifica on  Sender encrypts data using a shared secret key
 Authen ca on – verifying iden ty  Receiver decrypts data using the same key
 Non-repudia on – preven ng denial of ac ons Characteris cs:
Without cryptography, secure communica on over public networks like the Internet would  Fast processing
be impossible.
 Efficient for large data
 Requires secure key sharing
4.3 Basic Cryptographic Terminology
Advantages:
 Plaintext – Original readable data
 High speed
 Ciphertext – Encrypted unreadable data
 Low computa onal cost
 Encryp on – Process of conver ng plaintext to ciphertext
Limita ons:
 Decryp on – Process of conver ng ciphertext back to plaintext
 Key distribu on problem
 Key – Secret value used in encryp on and decryp on
 If key is compromised, security fails
Examples of use:
 Disk encryp on
 Secure internal communica on
4.4.2 Asymmetric Key Cryptography  Enables secure e-commerce
In asymmetric cryptography, two different keys are used:  Secures online banking
 Public key – used for encryp on  Ensures privacy and trust in networks
 Private key – used for decryp on
Working: 5. Firewalls
 Sender encrypts data using receiver’s public key
 Receiver decrypts data using private key 5.1 Introduc on to Firewalls
Characteris cs: A Firewall is a network security device or so ware that monitors and controls incoming and
outgoing network traffic based on predefined security rules.
 More secure
It acts as a barrier between a trusted internal network and an untrusted external network,
 Slower than symmetric cryptography
such as the Internet.
 No need to share private key
Advantages:
5.2 Purpose of a Firewall
 Secure key exchange
A firewall is used to:
 Supports digital signatures
 Prevent unauthorized access
Limita ons:
 Block malicious traffic
 Computa onally expensive
 Allow legi mate communica on
 Slower performance
 Enforce security policies

4.4.3 Hash Func ons

A hash func on converts data into a fixed-length hash value.
Features:
 One-way func on
 Same input always produces same hash
 Small change in input produces large change in hash
Used for:
 Password storage
 Data integrity verifica on

4.5 Importance of Cryptography

Cryptography:
 Protects sensi ve informa on

Limita ons:
 Cannot inspect packet content
 Less secure

5.4.2 Stateful Inspec on Firewall

 Tracks the state of ac ve connec ons
 Allows packets that are part of valid sessions
Advantages:
 More secure than packet filtering

5.3 How a Firewall Works  Be er traffic control

1. Data packets arrive at the firewall

2. Firewall checks packets against rules 5.4.3 Applica on-Level Firewall (Proxy Firewall)

3. Packets are:  Works at applica on layer

o Allowed  Inspects data content

o Blocked Advantages:

o Logged  High security

Firewall decisions are based on:  Protects against applica on-level a acks

 IP address Limita ons:

 Port number  Slower

 Protocol  More resource intensive

 Direc on of traffic
5.5 Advantages and Limita ons of Firewalls

5.4 Types of Firewalls Advantages:

 Prevents unauthorized access

5.4.1 Packet Filtering Firewall  Improves network security

 Examines packet headers  Centralized control

 Allows or blocks packets based on rules Limita ons:

Advantages:  Cannot stop internal a acks

 Simple  Cannot protect against all malware

 Fast  Requires proper configura on

6. Intrusion Detec on Systems (IDS) 6.3 Types of IDS
6.3.1 Network-Based IDS (NIDS)
6.1 Introduc on to IDS  Monitors network traffic
An Intrusion Detec on System (IDS) is a security mechanism that monitors network or  Placed at strategic network points
system ac vi es to detect suspicious behavior or policy viola ons.
Advantages:
Unlike firewalls, IDS does not block traffic, but detects and alerts administrators about
 Protects en re network
possible intrusions.
 Detects network-wide a acks

6.2 Purpose of IDS

6.3.2 Host-Based IDS (HIDS)
IDS is used to:
 Installed on individual systems
 Detect unauthorized access
 Monitors system logs and files
 Iden fy a acks in real me
Advantages:
 Generate alerts for administrators
 Detects insider a acks
 Support forensic analysis
 Detailed system analysis

6.4 Detec on Techniques

Signature-Based Detec on
 Matches traffic with known a ack pa erns
Advantage: Accurate for known a acks
Limita on: Cannot detect new a acks
Anomaly-Based Detec on
 Detects devia on from normal behavior
Advantage: Detects unknown a acks
Limita on: False posi ves possible

6.5 IDS vs Firewall

Aspect Firewall IDS

Ac on Blocks traffic Detects & alerts

Func on Preven on Detec on

Focus Access control A ack monitoring

7. Virtual Private Networks (VPNs) 7.4 Types of VPN

7.1 Introduc on to VPN 7.4.1 Remote Access VPN

A Virtual Private Network (VPN) is a technology that creates a secure, encrypted  Used by individual users
connec on over a public network such as the Internet.
 Allows secure access to corporate network
VPN allows users to access private networks remotely as if they were directly connected.
Example:
Work-from-home employees accessing office network
7.2 Why VPN is Required
VPN is required to: 7.4.2 Site-to-Site VPN
 Secure data over public networks  Connects two networks securely
 Protect privacy  Used by organiza ons with mul ple branches
 Enable remote access
 Bypass insecure networks 7.5 Advantages of VPN
 Secure communica on
 Data encryp on
 Privacy protec on
 Cost-effec ve

7.6 Limita ons of VPN

 Reduced speed due to encryp on
 Requires proper configura on
 Dependence on VPN provider

7.3 How VPN Works

8. Secure Protocols: HTTPS
1. User connects to VPN server
2. Encrypted tunnel is established
8.1 Introduc on to Secure Protocols
3. Data is transmi ed securely
A secure protocol is a communica on protocol designed to provide security services such
4. VPN server decrypts and forwards data as:
 Confiden ality
 Integrity
 Authen ca on
Normal Internet communica on protocols like HTTP transmit data in plain text, which can Step-by-Step Working of HTTPS
be easily intercepted. Secure protocols were developed to protect data transmi ed over
1. Client requests a secure connec on using HTTPS
untrusted networks like the Internet.
2. Server sends its digital cer ficate
One of the most widely used secure protocols is HTTPS.
3. Client verifies the cer ficate
4. Secure encryp on keys are established
8.2 What is HTTPS?
5. Encrypted communica on begins
HTTPS (Hypertext Transfer Protocol Secure) is the secure version of HTTP used for
communica on between a web browser (client) and a web server. Once the secure session is established, all HTTP data is transmi ed in encrypted form.
HTTPS ensures that:
 Data exchanged is encrypted
 Communica on is secure
 Users are communica ng with a legi mate server
HTTPS is widely used in:
 Online banking
 E-commerce websites
 Login pages
 Payment gateways

8.3 Difference Between HTTP and HTTPS

Feature HTTP HTTPS

Security No encryp on Encrypted

Data format Plain text Cipher text

Authen ca on Not provided Server authen ca on

Port number 80 443

Usage General browsing Secure transac ons

8.4 How HTTPS Works

HTTPS works by combining:
 HTTP (for data communica on)
 SSL/TLS (for security)

9.2 Purpose of SSL/TLS

SSL/TLS provides:
 Encryp on – Protects data confiden ality
 Authen ca on – Verifies server iden ty
 Integrity – Prevents data modifica on
These protocols form the security founda on of HTTPS.

9.3 SSL/TLS Architecture

SSL/TLS operates between:
 Applica on Layer (HTTP, FTP, SMTP)
 Transport Layer (TCP)
8.5 Importance of HTTPS It acts as a security layer that encrypts applica on data before transmission.
HTTPS:
 Protects user creden als
 Prevents data tampering
 Ensures secure online transac ons
 Builds user trust (lock symbol in browser)

8.6 Limita ons of HTTPS

 Slight performance overhead due to encryp on
 Requires digital cer ficates
 More complex setup than HTTP

9.4 SSL/TLS Handshake Process

9. SSL / TLS
The SSL/TLS handshake is the process of establishing a secure connec on.
Steps in SSL/TLS Handshake
9.1 Introduc on to SSL and TLS
1. Client Hello
SSL (Secure Sockets Layer) and TLS (Transport Layer Security) are cryptographic protocols
Client sends supported encryp on methods and random number.
that provide secure communica on over a network.
2. Server Hello
SSL was the original protocol, while TLS is its more secure and updated version. Today, TLS
Server selects encryp on method and sends its digital cer ficate.
has replaced SSL, but the term “SSL” is s ll commonly used.
3. Cer ficate Verifica on
Client verifies server cer ficate using a trusted authority.
 4. Key Exchange  Cer ficate management complexity
Session keys are securely generated.
 Requires correct configura on
5. Secure Communica on Begins
All data is encrypted using symmetric encryp on.
10. IPSec (Internet Protocol Security)

10.1 Introduc on to IPSec

IPSec (Internet Protocol Security) is a network-layer security protocol suite used to secure
IP communica on.
Unlike HTTPS and SSL/TLS (which work at higher layers), IPSec works directly at the Network
Layer, securing all IP packets.

10.2 Purpose of IPSec

IPSec is used to:
 Secure data at IP level
 Protect IP packets
9.5 Digital Cer ficates
 Implement Virtual Private Networks (VPNs)
A digital cer ficate:
It provides:
 Confirms server iden ty
 Confiden ality
 Contains public key
 Integrity
 Is issued by a trusted authority
 Authen ca on
Cer ficates prevent:
 Impersona on
10.3 How IPSec Works
 Man-in-the-middle a acks
IPSec secures IP packets by:
 Encryp ng packet payload
9.6 Advantages of SSL/TLS
 Authen ca ng packet source
 Strong security
 Ensuring packet integrity
 Widely supported
Security rules are defined using security associa ons (SA).
 Protects sensi ve informa on
 Essen al for secure web communica on

9.7 Limita ons of SSL/TLS

 Performance overhead

10.5 Modes of IPSec

1. Transport Mode
 Encrypts only payload
 Header remains unchanged
 Used in host-to-host communica on

2. Tunnel Mode
 Encrypts en re IP packet
 New IP header added
 Used in VPNs

10.6 Advantages of IPSec

 Network-layer security
 Transparent to applica ons
10.4 Components of IPSec
 Strong encryp on
 Ideal for VPN implementa on
1. Authen ca on Header (AH)
 Provides authen ca on and integrity
10.7 Limita ons of IPSec
 Does not encrypt data
 Complex configura on
 Protects packet headers and payload
 Processing overhead
 Difficult troubleshoo ng
2. Encapsula ng Security Payload (ESP)
 Provides encryp on
Comparison: HTTPS vs SSL/TLS vs IPSec
 Ensures confiden ality
Feature HTTPS SSL/TLS IPSec
 May also provide authen ca on
Layer Applica on Between App & Transport Network

3. Security Associa on (SA) Scope Web traffic Applica on data All IP traffic
 Defines security parameters Encryp on Yes Yes Yes
 Includes encryp on algorithm and keys
VPN support No No Yes