Chapter 31 of 41

Network Security

Our devices constantly exchange information over networks. We send messages, log in to websites, make payments, share files, and access cloud services.

But networks can also be targeted by attackers who try to steal information, disrupt services, or gain unauthorized access.

This is where Network Security becomes important.

Network security is the practice of protecting networks, devices, and data from unauthorized access, misuse, attacks, and disruption.

In simple words:

Network Security = Protecting communication and network resources from threats.


Why Do We Need Network Security?

Imagine sending your password over a network without any protection. An attacker who manages to intercept the communication might be able to read or misuse it.

Network security helps protect things such as:

  • User accounts

  • Passwords

  • Personal information

  • Business data

  • Network devices

  • Servers

  • Applications

  • Communication

A secure network aims to ensure that only authorized users can access resources and that data is protected from unauthorized changes or disclosure.


The CIA Triad

One of the most important concepts in security is the CIA Triad.

CIA stands for:

  • Confidentiality

  • Integrity

  • Availability

          Security
             │
     ┌───────┼───────┐
     ↓       ↓       ↓
Confidentiality Integrity Availability

1. Confidentiality

Confidentiality means preventing unauthorized people from accessing information.

For example, encryption can help prevent someone monitoring a network from reading protected data.

2. Integrity

Integrity means ensuring that data is not improperly modified or corrupted.

For example, cryptographic integrity mechanisms can help detect whether protected data has been altered.

3. Availability

Availability means making sure systems and services remain accessible when authorized users need them.

For example, redundancy and protection against denial-of-service attacks can help improve availability.


Common Network Security Threats

Networks can face many different types of attacks.

1. Malware

Malware is malicious software designed to damage systems, steal information, or perform unauthorized actions.

Examples include:

  • Viruses

  • Worms

  • Trojans

  • Ransomware

  • Spyware

A network can help malware spread between vulnerable systems, so network security is an important part of defending against it.


2. Phishing

Phishing is a social-engineering technique where attackers try to trick users into revealing sensitive information or performing an unsafe action.

For example, an attacker may send an email pretending to be a legitimate company and ask the victim to log in through a fake website.

The best technical security controls cannot completely replace user awareness.


3. Man-in-the-Middle Attack

In a Man-in-the-Middle (MITM) attack, an attacker attempts to position themselves between two communicating parties and intercept or manipulate communication.

User ───→ Attacker ───→ Server
         ↑
      Intercepts

Protocols such as TLS help protect communication by providing encryption and authentication.


4. Denial-of-Service Attack

A Denial-of-Service (DoS) attack attempts to make a service unavailable by overwhelming or disrupting it.

A Distributed Denial-of-Service (DDoS) attack uses many systems to generate the attack traffic.

Many Systems
  ↓  ↓  ↓  ↓
  ↓  ↓  ↓  ↓
Target Server
      ↓
Service Disrupted

Organizations can use traffic filtering, rate limiting, distributed infrastructure, and specialized mitigation services to reduce the impact of such attacks.


5. Password Attacks

Attackers may attempt to gain access by guessing, stealing, or cracking passwords.

Examples include:

  • Brute-force attacks

  • Credential stuffing

  • Password spraying

  • Phishing

Using strong, unique passwords and multi-factor authentication (MFA) can significantly improve account security.


Important Network Security Techniques

There are many techniques used to protect networks.

Firewalls

A firewall controls network traffic according to defined security rules.

For example:

Internet
   ↓
Firewall
   ↓
Internal Network

A firewall can allow legitimate traffic while blocking traffic that violates its rules.


Encryption

Encryption transforms readable information into protected ciphertext so that unauthorized parties cannot easily understand it.

For example:

Plaintext
   ↓
Encryption
   ↓
Ciphertext
   ↓
Network
   ↓
Decryption
   ↓
Plaintext

HTTPS, for example, uses TLS to protect web communication.


Authentication

Authentication verifies who a user or system is.

Examples include:

  • Passwords

  • Security keys

  • Certificates

  • Biometrics

  • Multi-factor authentication

A common example is logging into an online account with a password and a second authentication factor.


Access Control

Access control determines what an authenticated user or system is allowed to do.

For example:

User
 ↓
Authentication
 ↓
Authorization
 ↓
Allowed Resources

Authentication asks:

"Who are you?"

Authorization asks:

"What are you allowed to access?"


VPN

A VPN (Virtual Private Network) creates a protected communication tunnel over an underlying network.

For example:

Laptop ═════ Protected Tunnel ═════ VPN Server

VPNs are commonly used for securely connecting users or networks across untrusted networks.

However, using a VPN does not automatically make every activity or device completely secure.


Network Segmentation

Network segmentation divides a network into separate sections.

For example:

Network
├── Employee Devices
├── Servers
├── Guest Devices
└── IoT Devices

If one part of the network is compromised, segmentation can help limit how easily an attacker can move to other parts of the environment.

Technologies such as VLANs, firewalls, and access-control policies can be used to implement segmentation.


Intrusion Detection and Prevention

Organizations can use specialized systems to detect suspicious network activity.

IDS

IDS (Intrusion Detection System) monitors activity and generates alerts when suspicious behavior is detected.

IPS

IPS (Intrusion Prevention System) can go further by actively blocking or preventing certain detected threats.

Network Traffic
      ↓
     IDS
      ↓
   Detect
      ↓
    Alert

An IPS can additionally take action to block certain malicious traffic.


Network Security Best Practices

Some basic security practices include:

  • Use strong, unique passwords

  • Enable multi-factor authentication

  • Keep operating systems and network devices updated

  • Use encryption whenever appropriate

  • Configure firewalls properly

  • Segment sensitive networks

  • Monitor unusual network activity

  • Back up important data

  • Limit unnecessary network services

  • Give users only the access they actually need

Security works best as a layered approach rather than relying on a single security tool.

Conclusion

Network security is the practice of protecting networks, devices, communication, and data from unauthorized access, attacks, and disruption.

The most important concepts to remember are:

  • Confidentiality → Keep information private

  • Integrity → Keep information accurate and protected from unauthorized modification

  • Availability → Keep services accessible

  • Firewall → Controls network traffic

  • Encryption → Protects data

  • Authentication → Verifies identity

  • Access Control → Determines permissions

  • IDS/IPS → Detects or helps prevent suspicious activity

  • Segmentation → Limits the spread of security incidents

The easiest way to remember the main goal is:

Network Security = Protect the network, protect the data, and protect the users.