The importance of Network security

The importance of Network security

1. Network security 1

   • Reasons why.
     • It ensures only authorized people can access the network
     • Ensures that users can only acess the level that they are at
     • Prevents misuse and damage to hardware.
   • Importance of it
     • Privacy: data stored may be confidential and must be secured
     • Financial: the data may be of financial importance and cant be compromised
     • Buisness: success data on the networks may be pivotal for the business to run therefore if compromise it could cripple the buisness
   • Access control
     • Access control is used to set a network user's ability to access certain files and data sored
     • For example certain users may not be able to view folders and files, or they could be given the ability to read or read and write files at a greater clearance level, at the top level of clearance users could delete files and set other users rights on the network
   • Authentication
     • This is usually done by giving users a username and password
     • The passwords must be strong and secure but must never be written down as there is a chance of the account being compromised

2. Network security 2

   • Keep access doors locked with keypads, keys or biometric security systems
   • Use swipe cards containing users details and clearance levels
   • Installation of CCTV to monitor the users who access certain areas
   • Install burglar alarms to monitor the rooms
   • Fit Radio Frequency Identification (RFID) chips to sound an alarm when equipment is removed
   • Use chain and locks to secure objects to a specific place
   • Firewalls
     • A firewall protects a network that Is connected to a WAN
     • Can be provided by hardware or software
     • Can be used to prevent users accessing a certain program or communications entering the network

3. Cyberattacks

   • A cyberattack exploits humans using a network or technical weakness to obtain, delete or modify data or make the system unusable
   • Social engineering
     • This involves tricking people in to revealing their data examples of techniques are: Phishing or shoulder surfing
     • Phishing: can involve emails claiming to be a company they can trust and asking for details relating to accounts or private information
     • Shoulder surfing: Involves finding personal information by watching people enter them
   • Technical weaknesses
     • Unpatched software: companies release patches often to fix security issues that could be otherwise exploited by hackers
     • Eavesdropping: the interception of communications to learn information
     • USB devices can be used to install malware onto a network

4. Identifying vulnerabilities

   • Penetration testing
     • This is used to test a system or network to find vulnerabilities that a hacker may exploit it assesses the security and awareness of users
   • Ethical hacking
     • A computer and network expert who attempts to penetrate a computer system on behalf of the owners to find vulnerabilities that a malicious hacker may exploit
   • Review of network and user policies