5.2 Network Security

It is the processes, practices, and technologies designed to protect networks from attacks, damages, or unauthorized access.

It can happen internally and externally.

• Physical Security • CCTVs, Case Locks, Disabling USB Ports • Cloud Security • Ensure the cloud servers you use are safe

• Validation • Ensuring that data is correct and secure before processing • Authentication • Ensuring that an entity is genuine, like users, product authentications.

• Unpatched Software • Misconfigured Access Controls • Social Engineering • Phishing • Shoulder Surfing • USB devices • Portable Digital Devices • Eavesdropping • Malicious Code, malware basically • Commercial Analysis tools

It is basically just un-updated software, which may have some protection holes.

It is when an entity has permission to access something that they’re not supposed to.

It is the usage of sending emails from a ‘verified’ entity that contains malicious links that can lead to websites that download malware.

Someone staring at you when you type in important information.

It is malware like: • viruses • spyware • things like that

• Penetration Testing • Ethical Hacking

It is basically stimulating an attack to find any weaknesses. For example, entering a random username and password just to see if it can access the site. It is normally done by an external entity.

• White-box pen test • Inside attack, where attacker has some knowledge of the system • Black-box pen test • Outside attack, hacking

Hacking is finding and exploiting vulnerabilities, it is only ethical when done in a testing context. There are kinds identified by white/black/gray hat hackers. For it to be ethical, it must: • Have permission • Be worked on securely • notify admins when weaknesses are found

They monitor network traffic and filter data packets based on agreed rules. Routers and dedicated hardware contain firewalls, they can: • Block Packets • Connections from certain regions

Header Data Trailer

• Packet filtering is done by looking at the addresses on the packet header. (first generation) • Stateful Inspection is done by looking at the data context. (second generation)

• Design Stage Planning • Audit Trails • Securing Operating Systems • Good Programming Practices

It is threat modeling, basically just analysing vulnerabilities from a theoretical attacker’s view.

These are system records kept, which can trace security issues.

• Limit User Accounts • Directory Permissions • Strong Passwords • Limit automatic softwares • Install patches and update new versions