NETWORK SECURITY

 

NETWORK SECURITY 

Network security consists of the policies, processes, and practices adopted to prevent, detect, and monitor unauthorized computer networks and network-accessible resources.

Network security incorporates various technologies, processes, and devices into a broad strategy that protects the integrity, confidentiality, and accessibility of computer networks.

SOME EXAMPLES OF SECURITY NETWORK ARE

1. Malware: Harmful software such as viruses, worms, Trojans, ransomware, and spyware.

2. Phishing and Social Engineering: Tricks used to obtain sensitive information or spread malware.

3. Man-in-the-Middle (MitM) Attacks: Unauthorized interception of communication between users.

4. Denial of Service (DoS/DDoS) Attacks: Flooding systems with traffic to make them unavailable to legitimate users.

5. Unpatched Software and Weak Passwords: Security weaknesses caused by outdated systems and easily guessed credentials.

A vulnerability is a weakness in the network infrastructure, hardware or software systems, whereas a threat is a potential danger or an exploitation of that weakness 

TYPES OF VULNERABILITY 

1. System - flaws in the operating system

example: unpatched windows, outdated linux kernel.

2. Application; weakness in app code

example: cross site scripting (xss)

3. Network; issues in network setup or services

example: weak firewall rules

4. Configuration; improper security settings.

example: default admin password exposed directly

5. Authentication; login/session related flaws

example: weak passwords, session ID reuse.

6. Business logic; misuse of app flow or rules

example: unlimited coupon use.

7. Third-party product; vulnerable external components outdated plugins

MEASURES AND CONTROLS 

Things we are going to put in place:

*Patching all of the software; use up-to-date antivirus and firewall on all the software systems.

*Regularly download and install the latest security patches available for your e-mail program and browser, only download programs from reputable Web sites.

*Using an Endpoint Detection and Response (EDR) system as well, in lieu of antivirus.

*Putting some backup systems in place so that we can recover all data if it has been compromised.

*Conducting user training so that users know not to click on links and fall for phishing attacks that end up infecting their systems

 * Limit sharing disks and other removable storage media.

 * Only open e-mail attachments that aren't executable and are from people you know.

Thank you for taking the time to read. I hope the information has helped you understand the importance of protecting computer networks from threats and vulnerabilities. Your feedback, comments, and suggestions are highly appreciated, as they will help improve the quality and accuracy of future work. Please feel free to share your thoughts on the clarity, relevance, and usefulness of the information presented. Your input is valuable and will contribute to a better understanding of network security for all readers.

REFERENCE LIST. 

National Institute of Standards and Technology. (2024). Cybersecurity Framework (CSF) 2.0. Retrieved from nist.gov⁠�

Cybersecurity and Infrastructure Security Agency. (2025). Cybersecurity Best Practices. Retrieved from cisa.gov⁠�

OWASP Foundation. (n.d.). OWASP Top 10 Web Application Security Risks. Retrieved from owasp.org⁠�

Stallings, W., & Brown, L. (2023). Computer Security: Principles and Practice (5th ed.). Pearson Education.

Stallings, W. (2023). Network Security Essentials: Applications and Standards (7th ed.). Pearson Education.