Network Security Controls, Protocols, and Devices

Network Security Controls, Protocols, and Devices

1. 1. Fundamental Elements of Network Security

   • 1. Network Security Controls
   • 3. Devices
   • 2. protocols

2. 2. Network Security Controls

   • used to ensure the CIA of network services
   • 1. Access Controls
     • 2. Identification
       • 3. AAA
         • 4. Cryptography
           • 5. Policies

3. 3. User Identification, Authentication, Authorization and Accounting

   • 1. Identification: method to ensure that an individual holds a valid identification
   • 2. Authentication: validating the identity of an individual
   • 4. Accounting: method of keeping track of a user on the network
   • 3. Authorization: controlling the access of information for an individual

4. 4. Types of Authorization Systems

   • 1. Password Authentication
     • 2. Two-factor Authentication
       • 3. Biometrics
         • 4. Smart Card
           • 5. Single Sign-on
             • allows a user authenticate themselves to multiple servers
         • Fingerprinting, face, voice recognition, retinal scanning, etc
       • password | OTP | biometrics | smart cards

5. 5. Types of Authorization Systems

   • Authorization Principles
     • Least privileges
     • separation of duties
   • 1. Centralized
     • 2. Decentralized
       • 3. Implicit
         • 4. Explicit
           • requires separate authorization for each resources
         • access requested resources on behalf of others
       • each network resource maintains its own authorization unit
     • through a single centralized unit

6. 6. Cryptography

   • Encryption
     • a method a protecting info by transforming it
     • Types of Encryption
       • Symmetric
         • Single key
       • Asymmetric
         • private | public keys
   • Hashing
     • a method that transforms info into a fixed-length value
       • MD5 & SHA
   • Digital Signatures
     • asymmetric key that provide data integrity
   • Digital Certificates
   • PKI
     • an architecture developed to increase confidentiality

7. 7. Security Policy

   • defines the rules of access of network resources

8. 8. Network Security Devices

   • 1. Firewalls
     • 2. Proxy Servers
       • 3. Honeypot
         • 4. IDS
           • 5. IPS
   • 6. Network Protocol Analyzer
     • 7. Internet Content Filter
       • 8. Unified Threat Management (UTM)
         • 9. NAC
           • 10 DMZ
   • 11. VPN

9. 9. Network Security Protocols

   • 1. Radius
     • 2. TACACS+
       • 3. Kerberos
         • 4. PGP
           • 5. s/MIME
             • email security
           • provides security to data through methods of encryption and decryption
         • client server model
       • client server model
     • remote access
   • 6. Secure HTTP
     • 7. TLS
       • 8. SSL
         • 9. IPsec
           • authenticates packets during transmission
         • provides security between client and server
       • provides security between two communication parties

10. 3. Access Controls

    • method for reducing the risk of data getting affected
    • Types of Access Controls
      • 1. DAC - Discretionary Access Control
        • end user can decide how to protect
      • 2. MAC - Mandatory Access Controls
        • doesn't permit the end user a decision to decide
      • 3. Role-Based Access
        • assigns access to files etc on a one by one basics
    • Terminology
      • 1. Subject: users
      • 2. Object: resources
      • 3. Monitor: checks
      • 4. Operation: action taken
    • 1. Administrative Access Controls
      • 1. Security Policies & Procedures
        • 2. Personnel Controls
          • 3. Supervisory Structure
            • 4. Security Training
      • 5. Testing
        • 6. Job Rotation
          • 7. separation of Duties
            • 8. Information Classification
              • 9. Investigation
    • 2. Physical Access Controls
      • 1. Fences
        • 2. Locks
          • 3. Biometric
      • 4. Alarms
        • 5. CCTV
    • 3. Technical Access Controls
      • 1. System
        • 2. Network
          • 3. Encryption & Protocols
      • 4. Audting
        • 5. Anti-virus
          • 6. Firewalls