Network Security

Network Security

1. Defintion

   • Consists of the provisions and policies adopted by a network administrator to prevent and monitor unauthorized access, misuse, modification, or denial of a computer network and network-accessible resources
   • Network security refers to any activities designed to protect your network
     • These activities protect the usability, reliability, integrity, and safety of your network and data
   • Effective network security targets a variety of threats and stops them from entering or spreading on your network
   • Network security is accomplished through hardware and software. The software must be constantly updated and managed to protect you from emerging threats.

2. Risks

   • Viruses, worms, and Trojan horses
   • Spyware and adware
   • Zero-day attacks, also called zero-hour attacks
   • Hacker attacks
   • Denial of service attacks
   • Data interception and theft
   • Identity theft

3. Components

   • Anti-virus and anti-spyware
   • Firewall, to block unauthorized access to your network
   • Intrusion prevention systems (IPS), to identify fast-spreading threats, such as zero-day or zero-hour attacks
   • Virtual Private Networks (VPNs), to provide secure remote access

4. Benefits

   • You are protected against business disruption, which helps keep employees productive
   • Helps your company meet mandatory regulatory compliance
   • Because network security helps protect your customers' data, it reduces the risk of legal action from data theft.
   • Helps protect a business's reputation, which is one of its most important assets.

5. User Access Levels

   • Only allowed access to data if it directly involves your work
   • Administrator has universal read/write access

6. Data Protection Act

   • Doesn't apply if
     • your dead
     • your not identifiable

7. Disaster Recovery

   • to protect data against a disaster
   • Examples
     • Fire, flood, lightning, terrorists attacks etc.
     • Hardware failure - power supply, unit failing
     • Software failure - viruses
     • Accidental and malicious damage - hacking
   • Before the disaster
     • Risk analysis, preventive measures and staff training
   • During the disaster
     • Staff response - implement contingency plans
   • Post disaster
     • Recovery measures - purchasing replacement hardware, reinstalling software , restoring data from backups