AIMINFOSYS & OFAD
SYSTEMS
TRACK - CYBERSECURITY
OBJECTIVE: By the end of the lesson, trainees should know the scope of
networking and all it entails
13 – JAN - 2025
What is Networking?
Definition: Networking is the process of connecting
devices (computers, phones, servers) to exchange data and
share resources. Think of it as building a digital highway
for communication.
Key Networking Components
1. Nodes: This is a devices like computers and phones.
2. Links: This is the pathways (cables, Wi-Fi) that connect
devices.
Key Networking Components
3. Network Types:
LAN: Local Area Network (e.g., home or office).
WAN: Wide Area Network (e.g., the internet).
MAN: Metropolitan Area Network (city-wide networks).
IP Address
What is an IP Address?
An IP address is a unique identifier for a device on a network,
like a postal address for your home. It ensures that data sent
over a network reaches the correct destination.
Types of IP Address
1. IPv4: A 32-bit address, e.g. [Link]. It's simple but
limited in number.
2. IPv6: A 128-bit address, e.g., 2001:0db8:85a3:7334.
Supports a massive number of devices and includes built-in
security features.
Public vs. Private IPs
a. Public IPs: It is visible on the internet; assigned by ISPs
(Internet Service Providers).
b. Private IPs: It is used within local networks (e.g.,
192.168.x.X). These are hidden from the internet using NAT
(Network Address Translation).
Key Networking Protocols and Ports
TCP (Transmission Control Protocol)
It ensures reliable delivery of data by establishing a connection
before data is sent. It's like sending a package with a tracking
number.
7 Common TCP Ports and Example Applications
1. Port 80: HTTP (Web browsing).
2. Port 443: HTTPS (Secure web browsing).
3. Port 21: FTP (File Transfer Protocol).
4. Port 22: SSH (Secure remote access).
7 Common TCP Ports and Example Applications
5. Port 25: SMTP (Sending emails).
6. Port 3306: MySQL (Database communication).
7. Port 3389: RDP (Remote Desktop Protocol).
UDP (User Datagram Protocol)
UDP is faster but less reliable than TCP. It doesn't confirm
whether data is received, making it ideal for real-time
applications.
5 Common UDP Ports and Example Applications
1. Port 53: DNS (Translates domain names to IPs).
2. Port 123: NTP (Network Time Protocol).
3. Port 161: SNMP (Network device monitoring).
4. Port 69: TFTP (Trivial File Transfer Protocol).
5. Port 500: IPsec (VPN encryption).
Common Network Protocols
Application Layer Protocols
1. HTTP (HyperText Transfer Protocol)
Purpose: Transfers web pages and resources.
Example: Accessing [Link]
Cybersecurity Relevance: Vulnerable to attacks without HTTPS.
Common Network Protocols
2. HTTPS (HTTP Secure)
Purpose: Secure HTTP using SSL/TLS encryption.
Example: Banking or shopping online (e.g, [Link]
Cybersecurity Benefit: Encrypts data in transit.
Common Network Protocols
3. FTP (File Transfer Protocol)
Purpose: Transfers files between systems.
Example: Uploading website files to a server.
Cybersecurity Concern: Transmits data in plain text unless secured
with SFTP.
Common Network Protocols
4. SFTP (Secure File Transfer Protocol)
Purpose: Securely transfers files using SSH.
Example: Sending encrypted backups.
Cybersecurity Benefit: Prevents data interception.
Common Network Protocols
5. SMTP (Simple Mail Transfer Protocol)
Purpose: Sends emails from a client to a server.
Example: Sending emails via Gmail.
Cybersecurity Concern: Vulnerable to spoofing without SPF/DKIM.
Common Network Protocols
6. IMAP (Internet Message Access Protocol)
Purpose: Access and manage emails on a server.
Example: Syncing emails across devices.
Cybersecurity Benefit: Works with encryption (SSL/TLS).
Common Network Protocols
7. DNS (Domain Name System)
Purpose: Translates domain names to IP addresses.
Example: [Link] → [Link].
Cybersecurity Concern: Vulnerable to DNS spoofing.
Common Network Protocols
8. DHCP (Dynamic Host Configuration Protocol)
Purpose: Automatically assigns IP addresses to devices.
Example: Laptop connects to Wi-Fi and receives an IP.
Cybersecurity Risk: Rogue DHCP servers can assign malicious IPs.
Common Network Protocols
9. SNMP (Simple Network Management Protocol)
Purpose: Monitors and manages network devices.
Example: Managing routers and switches.
Cybersecurity Concern: Weak community strings can lead to
unauthorized access.
Common Network Protocols
10. Telnet
Purpose: Remote device management (insecure).
Example: Configuring network devices.
Common Network Protocols
2. UDP (User Datagram Protocol)
Purpose: Faster communication without error-checking.
Example: Online gaming, video streaming.
Cybersecurity Concern: UDP floods can cause DDoS.
Common Network Protocols
Network Layer Protocols
1. IP (Internet Protocol)
Purpose: Routes data packets between devices.
Example: IPv4, IPv6 addresses.
Cybersecurity Concern: IP spoofing attacks.
Common Network Protocols
2. ICMP (Internet Control Message Protocol)
Purpose: Sends error and diagnostic messages. o Example: Ping
command.
Cybersecurity Concern: Exploited in DDoS attacks.
Common Network Protocols
Data Link Layer Protocols
1. ARP (Address Resolution Protocol)
Purpose: Resolves IP addresses to MAC addresses.
Example: Ensures correct routing within a LAN.
Cybersecurity Concern: ARP spoofing attacks.
Common Network Protocols
2. Ethernet
Purpose: Defines wired LAN Communication.
Example: Office networks.
Cybersecurity Concern: Eavesdropping on unencrypted Ethernet
traffic.
Common Network Protocols
Security Protocols
1. SSL/TLS (Secure Sockets Layer/Transport Layer Security)
Purpose: Encrypts communication (e.g., HTTPS).
Example: Secure online transactions.
Cybersecurity Benefit: Prevents MITM attacks.
Common Network Protocols
2. IPsec (Internet Protocol Security)
Purpose: Secures IP traffic (e.g., VPNs).
Example: Encrypted communication between sites.
Cybersecurity Benefit: Provides data integrity and confidentiality.
Security Concern: Requires proper authentication to prevent
unauthorized access.
20 Common Network Protocols
2. LDAP (Lightweight Directory Access Protocol)
Purpose: Provides directory services for authentication.
Example: Centralized login systems in organizations.
Cybersecurity Concern: Misconfigured LDAP can allow
unauthorized access.
Common Network Protocols
V. Network Address Translation (NAT)
NAT allows multiple devices on a private network to share a single
public IP address for internet access.
Scenario: Your home Wi-Fi router uses NAT to let your laptop,
phone, and TV connect to the internet using one public IP.
Cybersecurity Relevance: NAT hides internal IP addresses, addinga
layer of security.
Key Network Devices
1. Router
• Purpose: It connects different networks (e.g., home and the
internet).
• Security Role: It blocks unauthorized traffic through ACLs.
2. Switch
• Purpose: It connects devices in the same LAN.
• Security Feature: It supports VLANs to isolate traffic.
Key Network Devices
3. Firewall
• Purpose: It allows or blocks traffic based on rules.
Types: Packet-filtering, stateful, and application-layer firewalls.
4. Access Points (APs)
• Purpose: It provides wireless connectivity to devices like
laptops, phones, and tablets.
• Security Concern: Weak passwords or insecure configurations
can allow unauthorized access to the network. Using WPA3
encryption is recommended for stronger security.
Key Network Devices
5. IDS/IPS (Intrusion Detection System / Intrusion Prevention
System)
• Purpose:
IDS: Monitors network traffic for suspicious activity and sends
alerts when malicious patterns are detected.
IPS: Acts as a proactive version of IDS, actively blocking
malicious activity based on real-time detection.
Security Role: Both systems enhance network security by
detecting and preventing attacks like malware, unauthorized
access attempts, and traffic anomalies.
Common Networking Attacks
1. DDoS (Distributed Denial of Service)
Description: The Attackers flood a network with excessive
traffic from multiple sources, overwhelming a server or service
and making it unavailable to legitimate users.
Scenario: A website being taken offline by a flood of fake
requests.
Cybersecurity Mitigation: DDoS protection services, traffic
filtering, and rate-limiting can help mitigate the impact.
Common Networking Attacks
2. MITM (Man-in-the-Middle)
Description: The attacker intercepts communication between
two parties (e.g., a user and a website) to steal data or inject
malicious content.
Scenario: Intercepting unencrypted HTTP traffic to steal login
credentials.
Cybersecurity Mitigation: Use of HTTPS, encryption, and
secure VPNs can prevent MITM attacks.
Common Networking Attacks
3. ARP Spoofing
Description: An attacker sends fake ARP messages on a local
network to associate their MAC address with the IP address of
another device, allowing them to intercept or manipulate traffic.
Scenario: Redirecting network traffic meant for a gateway to the
attacker's system. o Cybersecurity Mitigation: Static ARP entries
and using network monitoring tools to detect anomalies can help
defend against ARP spoofing.
Common Networking Attacks
4. DNS Spoofing (DNS Poisoning)
Description: The attacker manipulates DNS records, redirecting
users to malicious websites without their knowledge.
Scenario: Redirecting users trying to visit [Link] to a
fraudulent website to steal login details.
Cybersecurity Mitigation: DNSSEC (Domain Name System
Security Extensions) and using trusted DNS services can prevent
DNS poisoning.
Common Networking Attacks
5. Phishing
Description: A social engineering attack where attackers send
fraudulent messages to trick individuals into revealing sensitive
information such as usernames, passwords, or financial data.
Scenario: A fake email that appears to come from a bank asking
for login credentials.
Cybersecurity Mitigation: User education, email filtering, and
multi-factor authentication (MFA) can reduce the risk of
phishing.
Cybersecurity Best Practices for Networking
1. Use Encryption:
Ensure sensitive data is encrypted in transit (e.g., HTTPS, IPsec,
VPNS) to prevent eavesdropping or interception by attackers.
2. Apply Strong Authentication:
Use multi-factor authentication (MFA) for accessing critical
systems and networks to enhance security.
3. Monitor Network Traffic:
Continuously monitor network traffic using tools like Wireshark
or network monitoring systems (NMS) to detect anomalies or
suspicious activity.
Cybersecurity Best Practices for Networking
4. Segment Networks:
Implement Virtual Local Area Networks (VLANS) or subnets to
isolate sensitive systems and limit the impact of an attack.
5. Regularly Patch Devices and Software:
Apply security patches and updates to network devices, servers,
and applications to fix vulnerabilities before they can be
exploited by attackers.
6. Use Firewalls and IDS/IPS:
Deploy firewalls to filter traffic and IDS/IPS to detect and
prevent malicious activities. Ensure that these systems are
regularly updated and properly configured.
Cybersecurity Best Practices for Networking
7. Implement Access Control:
Limit user access to only the systems and data they need to do
their job. Apply the principle of least privilege and use role-
based access control (RBAC) wherever possible.
8. Backup Critical Data:
Regularly back up important data and store it securely to avoid
data loss in case of an attack, like ransomware.
9. Educate Users:
Provide regular cybersecurity training to employees or network
users about the risks of phishing, social engineering, and other
threats.
Cybersecurity Best Practices for Networking
10. Secure Wireless Networks:
Use strong encryption (e.g., WPA3) for Wi-Fi networks and
avoid default credentials to secure wireless communication from
unauthorized access.
GET TO WORK