Network Security - Module I
Firewalls
A firewall is a network security device or software that monitors and filters incoming and
outgoing network traffic based on predetermined security rules. It acts as a barrier
between a trusted network and an untrusted one (such as the Internet).
Types of Firewalls:
1 Packet Filtering Firewall – Filters packets based on IP addresses, ports, and protocols.
2 Stateful Inspection Firewall – Tracks the state of active connections and makes
decisions based on the context of traffic.
3 Proxy Firewall – Acts as an intermediary between users and the internet to filter
requests.
4 Next-Generation Firewall (NGFW) – Combines traditional firewall with features like
intrusion prevention and deep packet inspection.
Intrusion Detection Systems (IDS) and Intrusion Prevention
Systems (IPS)
IDS and IPS are security solutions that monitor network or system activities for malicious
activities or policy violations.
Difference:
1 IDS (Intrusion Detection System) – Detects threats and alerts administrators but does
not block them.
2 IPS (Intrusion Prevention System) – Detects and automatically blocks malicious traffic.
Types:
1 Network-based IDS/IPS (NIDS/NIPS) – Monitors traffic across the entire network.
2 Host-based IDS/IPS (HIDS/HIPS) – Monitors and protects a specific host or device.
Detection Methods:
1 Signature-based Detection – Detects attacks by comparing patterns to a known
database of signatures.
2 Anomaly-based Detection – Detects deviations from normal behavior to identify
unknown attacks.
Virtual Private Network (VPN)
A VPN provides a secure connection over the internet by encrypting data traffic between
the user and the network, ensuring privacy and data integrity.
Types of VPNs:
1 Site-to-Site VPN – Connects entire networks (e.g., two branch offices).
2 Remote Access VPN – Allows individual users to securely connect to a private network
remotely.
VPN Protocols:
1 IPSec – Provides security at the IP layer through encryption and authentication.
2 SSL/TLS – Used for securing web-based VPNs through browsers.
Wireless Security
Wireless security ensures that data transmitted over wireless networks is protected from
unauthorized access and misuse.
Wi-Fi Protected Access (WPA):
1 WPA – Improved version of WEP, providing stronger encryption (TKIP).
2 WPA2 – Uses AES encryption for better security.
3 WPA3 – Latest version offering enhanced encryption and protection against
brute-force attacks.
Wireless Intrusion Prevention Systems (WIPS):
A WIPS monitors the airwaves for unauthorized access points and suspicious activities
and can block malicious wireless connections automatically.
OSI & TCP/IP Stack
The OSI model and TCP/IP model define the layers of communication in a network
system.
OSI Model (7 Layers):
1 1. Physical – Transmits raw bits over a physical medium.
2 2. Data Link – Ensures reliable node-to-node communication.
3 3. Network – Handles packet forwarding and routing (e.g., IP).
4 4. Transport – Ensures reliable transmission (e.g., TCP, UDP).
5 5. Session – Manages sessions and connections.
6 6. Presentation – Translates data formats (e.g., encryption).
7 7. Application – Interface for end-user applications (e.g., HTTP, FTP).
TCP/IP Model (4 Layers):
1 1. Network Interface – Physical and Data Link functions.
2 2. Internet – Handles logical addressing (IP).
3 3. Transport – Provides communication between applications (TCP/UDP).
4 4. Application – Provides services like email, web, etc.
Operating System Basics
An Operating System (OS) manages computer hardware and software resources,
providing services for programs and users. Examples include Windows, Linux, and
macOS.
Web Basics
The web works on client-server architecture where clients (browsers) request resources
from servers using HTTP/HTTPS protocols.
PKI & SSL Basics
Public Key Infrastructure (PKI) is a framework that uses cryptographic keys and digital
certificates to secure communication. SSL (Secure Sockets Layer) is a protocol that
encrypts data between the web server and browser, ensuring secure transmission.
Example: When you visit a website with HTTPS, SSL/TLS encrypts your connection so
your data remains private and secure.