Introduction to Network Security
Network Security = protection of data, devices, and resources in a network.
Main purpose: Prevent unauthorized access, misuse, modification, or disruption of
services.
Important because networks connect computers, servers, cloud systems, and users
globally.
Goals of Network Security (CIA Triad)
1. Confidentiality – Ensuring only authorized users have access to information (e.g.,
encryption, authentication).
2. Integrity – Protecting data from being altered or tampered with (e.g., hashing, digital
signatures).
3. Availability – Ensuring resources and services are accessible when needed (e.g.,
firewalls, redundancy, DDoS protection).
Features of Network Security
Access Control – Restricting who can access what resources.
Authentication & Authorization – Verifying user identity and assigning appropriate
privileges.
Data Encryption – Protecting data in transit and at rest.
Intrusion Detection & Prevention – Identifying and stopping malicious activities.
Scalability – Security must grow with network expansion.
Monitoring & Logging – Continuous analysis of network activities.
Policy Enforcement – Applying consistent security rules across devices and users.
Components of Network Security
1. Hardware Components
o Firewalls – Control incoming/outgoing traffic based on rules.
o Routers & Switches with Security Features – Filtering and segmentation.
o IDS/IPS (Intrusion Detection/Prevention Systems) – Monitor and block
suspicious activities.
o VPN Gateways – Secure remote access.
2. Software Components
o Antivirus & Antimalware – Protect endpoints from malicious software.
o Encryption Tools (SSL/TLS, IPSec) – Secure communications.
o Security Information and Event Management (SIEM) – Centralized logging
and monitoring.
o Access Control Software – Identity & Access Management (IAM).
3. Human & Policy Components
o Security Policies – Guidelines for safe network usage.
o User Awareness & Training – Educating users to avoid phishing/social
engineering.
o Incident Response Plans – Procedures to handle security breaches.
Types of Network Security
Physical Security – Protecting physical devices (servers, routers).
Network Access Control (NAC) – Restricting device access based on compliance.
Application Security – Protecting applications from threats (SQL injection, XSS).
Endpoint Security – Securing laptops, mobiles, IoT devices.
Cloud Security – Protecting data and applications in cloud environments.
Wireless Security – Protecting Wi-Fi networks (WPA3, VPNs).
Threat Defense / Countermeasure
Malware Antivirus / Antimalware tools
Phishing User Training, Awareness, Email Filters
Man-in-the-Middle (MITM) Attack Encryption (SSL/TLS, VPN)
DoS/DDoS Attack Firewalls, IDS/IPS, Load Balancers
Password Attacks Strong Authentication, MFA, Password Policies
Insider Threats Security Policies, Access Control, Monitoring
Advanced Persistent Threats (APT) Continuous Monitoring, Incident Response
Networking Concepts and Protocol
Network security is the practice of protecting the confidentiality, integrity, and availability of
data as it travels across computer networks. To understand how to secure a network, one must
first understand networking concepts and protocols, as these are the backbone of all
communication systems. Protocols define how data is formatted, transmitted, routed, and
verified, while networking concepts describe the infrastructure and logic behind data flow and
connectivity.
Network Security Mechanisms Based on Networking Concepts
• Firewalls: Control packet flow based on IP, port, and protocol.
• Intrusion Detection/Prevention Systems (IDS/IPS): Monitor packets for anomalies.
• Virtual LANs (VLANs): Segment networks to isolate sensitive systems.
• Network Access Control (NAC): Ensures only authenticated devices can join the network.
• Encryption Protocols (TLS, SSL, IPsec, SSH): Secure data in transit.
• Proxy Servers: Hide internal systems and filter traffic.
• Load Balancers: Distribute traffic to maintain performance and prevent DoS overload.
Network Security Principles Applied to Networking
1. Confidentiality: Encryption ensures only authorized users can read transmitted data.
2. Integrity: Hashing and message authentication codes (MACs) verify that data isn’t altered.
3. Availability: Redundancy and failover mechanisms keep services online during attacks.
4. Authentication: Verifies identity using credentials, certificates, or multi-factor methods.
5. Non-repudiation: Ensures that senders cannot deny sending a message (e.g., digital
signatures).
Core Networking Concepts in Network Security
Concept Description Security Importance
IP Addressing Unique identifiers for devices Helps trace, filter, and control
on a network. devices. IP spoofing attacks
must be prevented.
Subnets & VLANs Logical segmentation of Segmentation limits attack
networks. spread and isolates sensitive
systems.
Routing & Switching Methods for directing and Routing security prevents
delivering packets. hijacking; switch security
prevents MAC flooding.
Network Topology Physical/logical structure of Determines security exposure;
network connections. mesh or segmented topologies
improve resilience.
Ports and Protocols Logical communication Restrict unused ports; monitor
endpoints. active protocols to prevent
intrusion.
Firewalls & Gateways Control data flow between Block unauthorized access,
trusted/untrusted zones. filter traffic by IP, port, or
protocol.
Encryption & VPNs Secure data in transit using Ensures confidentiality and
cryptographic methods. prevents data interception.
DNS Resolves domain names to IP DNSSEC protects from DNS
addresses. poisoning and spoofing.
Network Access Control Controls which devices/users Prevents unauthorized access to
(NAC) can connect. network resources.
Key Networking Protocols and Their
Security Aspects
Protocol Purpose Security Risks Security Measures
HTTP Transfers web data in Susceptible to Use HTTPS (TLS
plaintext. eavesdropping and data encryption) instead.
theft.
HTTPS Secure version of Requires valid Use updated TLS
HTTP using TLS. certificates; risk of versions and strong
expired or forged certs. ciphers.
FTP Transfers files between Sends credentials in Replace with SFTP
systems. plaintext. (SSH) or FTPS.
SMTP Sends emails between Vulnerable to spoofing Use STARTTLS, SPF,
servers. and spam. DKIM, and DMARC.
SNMP Manages and monitors Default public/private Use SNMPv3 with
network devices. strings can be encryption and
exploited. authentication.
DNS Converts domain DNS poisoning and Implement DNSSEC
names to IPs. spoofing attacks. and secure resolvers.
DHCP Assigns IPs Rogue DHCP servers Use DHCP snooping
automatically. can redirect traffic. and trusted ports.
ICMP Used for diagnostics Can be abused for DoS Limit ICMP traffic
(ping/traceroute). or network mapping. using firewalls.
SSH Remote administration Brute-force password Enforce key-based
with encryption. attacks. authentication and rate
limiting.
IPSec Encrypts and Complex setup; Use strong keys and
authenticates IP misconfigurations correct modes
packets. possible. (ESP/AH).
Network Security Models Based on Protocol
Layers
OSI Layer Key Protocols Security Concerns Defensive Measures
Application HTTP, SMTP, FTP, Malware, phishing, Input validation,
DNS injection HTTPS, email filters
Transport TCP, UDP, TLS Port scanning, SYN Firewalls, IDS/IPS, rate
floods limiting
Network IP, ICMP, IPSec IP spoofing, sniffing VPNs, IPsec, routing
authentication
Data Link Ethernet, ARP MAC spoofing, ARP VLANs, port security,
poisoning ARP inspection
Physical Cable, Wi-Fi Tampering, CCTV, access control,
eavesdropping shielding