Security in Networking Done by: Zeyana Saif Ahmed ALkindi ID #: 11212451

Outline Definition of Network Security The source of Network Security violation Techniques used in securing Network

Network Security Vs. Computer Security Network security is concerned with who connects to and what goes across a network connecting systems. Network security is making sure that your network of computers is secure Computer security is making sure that one single computer is secure

Why do we need security? Protect vital information while still allowing access to those who need it, like medical records Provide authentication and access control for resources Guarantee availability of resources

Goals of Network Security Prevention: prevent attackers from violating security policy Detection: detect attackers’ violation of security policy Response: Sop attack, assess and repair damages Continue to function correctly even if attack succeeds.

Security Attributes Identification Authentication Access Control (Authorization)  Integrity Availability Confidentiality Accountability

Threat Threat is a violation of network security requirements. In other words, threat is an occurrence that can affect a system or an organization as a whole.

Vulnerability Vulnerability is a weaknesses in the network that can be exploited by a threat. Lack of user awareness, users copy and share infected software, fail to detect signs of virus activity and do not understand proper security techniques. Absence of security controls, personal computers generally lack software and hardware security mechanisms that help to prevent and detect unauthorized users. Ineffective use of existing security controls, using easily guessed passwords, failing to use access control, granting users more access to recourses than is necessary. Unauthorized use, unauthorized users can break into systems.

Source of Security violation Employees: The largest category of security violations consists of those with the easiest access to computers namely employees Hackers & Crackers : Hackers are people who gain unauthorized access to computer system for the fun and challenge of it. Crackers are people who do the same thing but for malicious purposes like stealing technical information or introduce a destructive computer program into the system.

Common Security Attack Malicious programs: called malware, which is short for malicious software. There are especially designed to damage or disrupt the security system. The three common types of malware are viruses, worms, and Trojan horses

Common Security Attack Denial of Service: make a network service unusable, usually by overloading the server or network Ex: SMURF

TCP hijacking TCP hijacking is a method of attacking over a web user.

Packet Sniffing When someone wants to send a packet to some else They put the bits on the wire with the destination MAC address … And other hosts are listening on the wire to detect for collisions … It couldn’t get any easier to figure out what data is being transmitted over the network!

Network Authentication Methods In a network environment, the security settings control how users and computers authenticate to the network. Authentication is the first line of defense against attack or intrusion into network systems The various network authentication methods are: Strong passwords Kerberos Extensible Authentication Protocol (EAP)

Strong Passwords A strong Password is a password that meet complexity requirements that are set by a system administrator and documented in a password policy by specifying: Authentication based on user name/password combination called as authentication by assertion

Kerberos Kerberos is an internet standard authentication protocol that links a user name and password to an authority that can certify that the user is valid and also verify the user’s ability to access recourses

A Kerberos process A Kerberos client uses a Kerberos authentication process to establish a secure connection with a service

Extensible Authentication Protocol (EAP) Extensible Authentication Protocol (EAP) is an authentication protocol that enables systems to use hardware based-identifiers such as, fingerprint scanners or smart card readers, for authentication.

Firewall A firewall is a software program or hardware device that protects networks from unauthorized data by blocking unsolicited traffic.

Network Address Translation Network Address Translation is a form of Internet security that conceals (hide) internal addressing schemes from the public internet. NAT is implemented as : Software such as ICS in windows systems Hardware such as cable modems and DSL routers

The NAT process The NAT process translates internal and external addresses based on port numbers following the steps: Step1: Client Request Step2: Source Address Conversation Step3: Data return Step4: Internal Source identification Step5: Data deliver

DMZs))Demilitarized Zones DMZ is a small section of a private network that is located between two firewalls and made available for public access.

Proxy servers Proxy servers are often used to provide security for internet applications. A Proxy servers acts as an intermediary between a PC and the internet, separating an enterprise network from an outside network.

Conclusion Shortly, Network interconnects computers and communication devices within buildings. The data which is transmitted through the Network should be secured. The security administrators should be aware of possible misuse and take responsibility for safeguarding the Networks resources under their control.

Thank You !