network_security.docx_2.pdf

Network Security Meaning
Network security is an organization’s strategy that enables guaranteeing the security
of its assets including all network traffic. It includes both software and hardware
technologies. Access to the network is managed by effective network security, which
targets a wide range of threats and then arrests them from spreading or entering in the
network.
Network Security Definition
Network security is an integration of multiple layers of defenses in the network and at
the network. Policies and controls are implemented by each network security layer.
Access to networks is gained by authorized users, whereas, malicious actors are indeed
blocked from executing threats and exploits.
Our world has presently been transformed by digitization, resulting in changes in almost
all our daily activities. It is essential for all organizations to protect their networks if they
aim at delivering the services demanded by employees and customers. This eventually
protects the reputation of your organization. With hackers increasing and becoming
This study source was downloaded by 100000801853261 from CourseHero.com on 09-24-2022 03:03:59 GMT -05:00
https://www.coursehero.com/file/123727009/network-securitydocx/

smarter day by day, the need to utilize network security tool becomes more and more
impotent.
Types of Network Security
 Antivirus and Antimalware Software
 Application Security
 Behavioral Analytics
 Data Loss Prevention (DLP)
 Email Security
 Firewalls
 Mobile Device Security
 Network Segmentation
 Security Information and Event Management (SIEM)
 Virtual Private Network (VPN)
 Web Security
 Wireless Security
 Endpoint Security
 Network Access Control (NAC)
Antivirus and Antimalware Software : This software is used for protecting against
malware, which includes spyware, ransomware, Trojans, worms, and viruses. Malware
can also become very dangerous as it can infect a network and then remain calm for
days or even weeks. This software handles this threat by scanning for malware entry
and regularly tracks files afterward in order to detect anomalies, remove malware, and
fix damage.
Application Security: It is important to have an application security since no app is
created perfectly. It is possible for any application to comprise of vulnerabilities, or

holes, that are used by attackers to enter your network. Application security thus
encompasses the software, hardware, and processes you select for closing those holes.
Behavioral Analytics: In order to detect abnormal network behaviour, you will have to
know what normal behavior looks like. Behavioral analytics tools are capable of
automatically discerning activities that deviate from the norm. Your security team will
thus be able to efficiently detect indicators of compromise that pose a potential problem
and rapidly remediate threats.
Data Loss Prevention (DLP): Organizations should guarantee that their staff does not
send sensitive information outside the network. They should thus use DLP technologies,
network security measures, that prevent people from uploading, forwarding, or even
printing vital information in an unsafe manner.
Email Security: Email gateways are considered to be the number one threat vector for
a security breach. Attackers use social engineering tactics and personal information in
order to build refined phishing campaigns to deceive recipients and then send them to
sites serving up malware. An email security application is capable of blocking incoming
attacks and controlling outbound messages in order to prevent the loss of sensitive
data.
Firewalls: Firewalls place a barrier between your trusted internal network and untrusted
outside networks, like the Internet. A set of defined rules are employed to block or allow
traffic. A firewall can be software, hardware, or both. The free firewall efficiently
manages traffic on your PC, monitors in/out connections, and secures all connections
when you are online.
Intrusion Prevention System (IPS): An IPS is a network security capable of scanning
network traffic in order to actively block attacks. The IPS Setting interface permits the
administrator to configure the ruleset updates for Snort. It is possible to schedule the
ruleset updates allowing them to automatically run at particular intervals and these
updates can be run manually on demand.

Mobile Device Security: Mobile devices and apps are increasingly being targeted by
cybercriminals. 90% of IT organizations could very soon support corporate applications
on personal mobile devices. There is indeed the necessity for you to control which
devices can access your network. It is also necessary to configure their connections in
order to keep network traffic private.
Network Segmentation: Software-defined segmentation places network traffic into
varied classifications and makes enforcing security policies a lot easier. The
classifications are ideally based on endpoint identity, not just IP addresses. Rights can
be accessed based on location, role, and more so that the right people get the correct
level of access and suspicious devices are thus contained and remediated.
Security Information and Event Management (SIEM):SIEM products bring together
all the information needed by your security staff in order to identify and respond to
threats. These products are available in different forms, including virtual and physical
appliances and server software.
Virtual Private Network (VPN): A VPN is another type of network security capable of
encrypting the connection from an endpoint to a network, mostly over the Internet. A
remote-access VPN typically uses IPsec or Secure Sockets Layer in order to
authenticate the communication between network and device.
Web Security: A perfect web security solution will help in controlling your staff’s web
use, denying access to malicious websites, and blocking
Wireless Security: The mobile office movement is presently gaining momentum along
with wireless networks and access points. However, wireless networks are not as
secure as wired ones and this makes way for hackers to enter. It is thus essential for the
wireless security to be strong. It should be noted that without stringent security
measures installing a wireless LAN could be like placing Ethernet ports everywhere.
Products specifically designed for protecting a wireless network will have to be used in
order to prevent an exploit from taking place.

Endpoint Security: Endpoint Security, also known Endpoint Protection or Network
Security, is a methodology used for protecting corporate networks when accessed
through remote devices such as laptops or several other wireless devices and mobile
devices. For instance, Comodo Advanced Endpoint Protection software presents seven
layers of defense that include viruscope, file reputation, auto-sandbox, host intrusion
prevention, web URL filtering, firewall, and antivirus software. All this is offered under a
single offering in order to protect them from both unknown and known threats.
Network Access Control (NAC): This network security process helps you to control
who can access your network. It is essential to recognize each device and user in order
to keep out potential attackers. This indeed will help you to enforce your security
policies. Noncompliant endpoint devices can be given only limited access or just
blocked.
https://enterprise.comodo.com/blog/what-is-network-security/
Network security conceptEdit
Network security starts with authentication, commonly with a username and
a password. Since this requires just one detail authenticating the user name
—i.e., the password—this is sometimes termed one-factor authentication.
With two-factor authentication, something the user 'has' is also used (e.g.,
a security token or 'dongle', an ATM card, or a mobile phone); and with three-
factor authentication, something the user 'is' is also used (e.g.,
a fingerprintor retinal scan).
Once authenticated, a firewall enforces access policies such as what services
are allowed to be accessed by the network users.[1] Though effective to
prevent unauthorized access, this component may fail to check potentially
harmful content such as computer worms or Trojans being transmitted over
the network. Anti-virus software or an intrusion prevention system (IPS)
[2] help detect and inhibit the action of such malware. An anomaly-based
intrusion detection system may also monitor the network like
wireshark traffic and may be logged for audit purposes and for later high-
level analysis. Newer systems combining unsupervised machine learningwith
full network traffic analysis can detect active network attackers from
malicious insiders or targeted external attackers that have compromised a
user machine or account.[3]
Communication between two hosts using a network may be encrypted to
maintain privacy.

Honeypots, essentially decoy network-accessible resources, may be
deployed in a network as surveillance and early-warning tools, as the
honeypots are not normally accessed for legitimate purposes. Techniques
used by the attackers that attempt to compromise these decoy resources are
studied during and after an attack to keep an eye on
new exploitation techniques. Such analysis may be used to further tighten
security of the actual network being protected by the honeypot. A honeypot
can also direct an attacker's attention away from legitimate servers. A
honeypot encourages attackers to spend their time and energy on the decoy
server while distracting their attention from the data on the real server.
Similar to a honeypot, a honeynet is a network set up with intentional
vulnerabilities. Its purpose is also to invite attacks so that the attacker's
methods can be studied and that information can be used to increase
network security. A honeynet typically contains one or more honeypots.[4]
1. A Role-Based Trusted Network Provides Pervasive Security and Compliance -
interview with Jayshree Ullal, senior VP of Cisco
2. ^ Dave Dittrich, Network monitoring/Intrusion Detection Systems
(IDS) Archived 2006-08-27 at the Wayback Machine, University of Washington.
3. ^ "Dark Reading: Automating Breach Detection For The Way Security
Professionals Think". October 1, 2015.
4. ^ "''Honeypots, Honeynets''". Honeypots.net. 2007-05-26. Retrieved 2011-
12-09.
Powered by TCPDF (www.tcpdf.org)

network_security.docx_2.pdf

More Related Content

Similar to network_security.docx_2.pdf

Recently uploaded

network_security.docx_2.pdf