Assignment #4
Student name: Zeenat Rashid
Student ID: BITF25M517
Submitted to :[Link] Raza
1. Explanation of the CIA Triad
The CIA Triad is a fundamental model in information security that guides policies and practices
to protect data and systems. It consists of three core principles:
Confidentiality
Confidentiality ensures that sensitive information is only accessible to authorized individuals or
systems. It prevents unauthorized access and data breaches.
Methods used to achieve confidentiality:
Encryption (e.g., SSL/TLS, AES)
Password protection
Access control mechanisms
Example:
When you log into an online banking system, your credentials are encrypted to prevent hackers
from accessing your account information.
Integrity
Integrity ensures that data remains accurate, consistent, and unaltered during storage or
transmission. It protects against unauthorized modification.
Methods used to maintain integrity:
Hashing (e.g., SHA algorithms)
Digital signatures
Checksums
Example:
When downloading software, checksums are used to verify that the file has not been tampered
with.
Availability
Availability ensures that data and network resources are accessible to authorized users when
needed.
Methods used to ensure availability:
Regular system maintenance
Backup systems
Redundancy (e.g., multiple servers)
Example:
Cloud services use backup servers so users can still access data even if one server fails.
2. Importance of Authentication, Authorization, and
Accountability
These three concepts are essential for securing network systems.
Authentication
Authentication verifies the identity of a user or system.
Examples:
Username and password
Biometric verification (fingerprint, face recognition)
Two-factor authentication (OTP)
Importance:
Prevents unauthorized users from accessing systems.
Authorization
Authorization determines what an authenticated user is allowed to do.
Examples:
Admin vs. regular user permissions
File access restrictions
Importance:
Ensures users can only access the resources they are permitted to use.
Accountability
Accountability tracks user actions within a system.
Examples:
Log files
Audit trails
Importance:
Helps identify misuse, detect security breaches, and maintain responsibility for actions.
3. Real-World Examples in Network Environments
Example 1: Online Banking System
Confidentiality: Encryption protects user data.
Integrity: Transactions are verified using secure protocols.
Availability: 24/7 access through reliable servers.
Authentication: Login credentials + OTP.
Authorization: Users can only access their own accounts.
Accountability: Transaction logs record all activities.
Example 2: University Network System
Confidentiality: Student records are protected.
Integrity: Grades cannot be altered without authorization.
Availability: Systems are available during working hours.
Authentication: Student ID and password.
Authorization: Teachers can edit grades, students can only view.
Accountability: System logs track changes in records.
Example 3: E-commerce Platforms
Confidentiality: Payment information is encrypted.
Integrity: Order details remain unchanged during processing.
Availability: Website uptime is maintained for customers.
Authentication: User login accounts.
Authorization: Sellers and buyers have different permissions.
Accountability: Order history and activity logs.
4. Cloud Computing and Its Impact on Networking
Concept of Cloud Computing
Cloud computing refers to delivering computing services (servers, storage, networking, software)
over the internet instead of local systems.
Types of Cloud Services
IaaS (Infrastructure as a Service)
Provides virtualized computing resources like servers and storage.
Example: AWS EC2
Use: Organizations manage OS and applications.
PaaS (Platform as a Service)
Provides platforms for developers to build and deploy applications.
Example: Google App Engine
Use: Developers focus on coding without managing infrastructure.
SaaS (Software as a Service)
Provides software applications over the internet.
Example: Google Docs, Microsoft 365
Use: Users access software via browsers.
How Networking Works in Cloud Environments
Cloud providers use virtual networks instead of physical networks.
Resources communicate via IP addresses and APIs.
Load balancers distribute traffic.
Data centers are globally distributed for better performance.
Security Challenges in Cloud Networking
Data breaches due to misconfiguration
Unauthorized access
Data loss
Insider threats
Weak APIs
Solutions:
Strong encryption
Identity and access management (IAM)
Regular monitoring and audits
Emerging Trends in Cloud Networking
1. Multi-cloud Strategy
Organizations use multiple cloud providers to avoid dependency.
2. Edge Computing
Processing data closer to the user to reduce latency.
3. Zero Trust Security Model
No user or device is trusted by default.
4. AI-driven Networking
Artificial intelligence is used for traffic management and threat detection.
How Organizations Are Adapting
Adopting hybrid cloud systems
Investing in cybersecurity tools
Training staff in cloud technologies
Implementing automated monitoring systems
Conclusion
The CIA Triad forms the foundation of network security, while authentication, authorization, and
accountability ensure controlled and traceable access. Real-world systems rely heavily on these
principles to maintain secure and reliable operations. With the rise of cloud computing,
networking has evolved significantly, offering scalability and flexibility but also introducing new
security challenges. Organizations must continuously adapt to emerging technologies and threats
to maintain secure network environments.
If you want, I can also:
Format this into a ready-to-print Word document layout
Add a proper title page design
Convert it into PDF format style