Please Visit the Main site at
|
All About Network Security
In today's World of Technology, People always talk about IT Network Security. It has become a HOT topic. But how many of us really know what IT Network or System Security is ? What are the threats we are facing due to improper or lack of Network Security? What are the measures we can take to Secure our Network? Beside the threats, In fact we all should be aware of the advantages of a a secured network/system, whether it is a an Enterprise/Medium/small business or it is a home network, Secured system is not an overhead but is a must have for us. In all these past years, I have discovered one thing - If you want to Prevent your data from been misused by so called HACKERS/CRACKERS, then you have to have a hacker's mind. You have to think like a hacker. Moreover I must also say that its not always Hackers/crackers who can do the damage. Many times it has been seen that internal users/employees do most of the damage than from outsiders. Please read below to find what CISCO, EC Council, Microsoft etc (also taken from few other site) say about Network and Network Security and Ethical Hacking. Also please go through the Blog to read latest Hacking Methods, Network Security Methods and approach and for software/Hacking tools downloads.
Network security comprises the measures a company takes to protect its computer system, and it is a prime concern for every company that uses computers. Compromised network security means a hacker or competitor may gain access to critical or sensitive data, possibly resulting in data loss, or even complete destruction of the system. Appropriate network security is achieved when a user has to go through several layers of security before being able to access the desired network. The more layers the system has, the more secure it is.
The systems administrator is often in charge of network security since he has administrator privileges on the system. In fact, only the systems administrator should have administrative access to the servers and related computer terminals. This will help keep unauthorized people in the company from changing any data on the servers.
A systems administrator will also build a secure firewall for the network, which may include an encryption layer and sentinel software that automatically
repels an unauthorized program from gaining access. The administrator may also place restrictions on employees' computers to prevent them from accessing websites that may have malicious coding or malware that will install itself on a user's computer. Anti-adware and malware programs are available for individual computers, as well as for networks.
One problem that generally arises when network security is implemented is that of flexibility. Management must balance security issues against employees' ability to access websites for their work. Communication among management, the systems administrator and employees is critical for network security to operate and for the employees to be able to work with it.
As evidenced in dealing with past e-mail and network viruses, security breaches are costly and detrimental to production and efficiency. U.S. companies spend millions of dollars each year in network security measures. A company's best defense against network security breaches is a multi-pronged attack. Firewalls with no single point of access, sharp systems administrators, frequent security updates, and early installation of anti-adware will all help keep a network safe.
Here is what Experts has to say....
Network security consists of the provisions made in an underlying computer network infrastructure, policies adopted by the network administrator to protect the network and the network-accessible resources from unauthorized access and the effectiveness (or lack) of these measures combined together.
Securing network infrastructure is like securing possible entry points of attacks on a country by deploying appropriate defense. Computer security is more like providing means to protect a single PC against outside intrusion. The former is better and practical to protect the civilians from getting exposed to the attacks. The preventive measures attempt to secure the access to individual computers--the network itself--thereby protecting the computers and other shared resources such as printers, network-attached storage connected by the network. Attacks could be stopped at their entry points before they spread. As opposed to this, in computer security the measures taken are focused on securing individual computer hosts. A computer host whose security is compromised is likely to infect other hosts connected to a potentially unsecured network. A computer host's security is vulnerable to users with higher access privileges to those hosts.
Attributes of a secure network
Network security starts from authenticating any user, most likely an username and a password. Once authenticated, a stateful firewall enforces access
policies such as what services are allowed to be accessed by the network users. Though effective to prevent unauthorized access, this component fails to
check potentially harmful contents such as computer worms being transmitted over the network. An intrusion prevention system (IPS) helps detect and prevent such malware. IPS also monitors for suspicious network traffic for contents, volume and anomalies to protect the network from attacks such as denial of service. Communication between two hosts using the network could be encrypted to maintain privacy. Individual events occurring on the network could be tracked for audit purposes and for a later high level analysis.
Honeypots, essentially decoy network-accessible resources, could be deployed in a network as surveillance and early-warning tools. Techniques used by the attackers that attempt to compromise these decoy resources are studied during and after an attack to keep an eye on new exploitation techniques. Such analysis could be used to further tighten security of the actual network being protected by the honeypot.
Security management
Security Management for networks is different for all kinds of situations. A small home or an office would only require basic security while large businesses will require high maintenance and advanced software and hardware to prevent malicious attacks from hacking and spamming.
Small homes
* A basic firewall.
* For Windows users, basic Antivirus software like McAfee, Norton AntiVirus, AVG Antivirus or Windows Defender, others may suffice if they contain a virus scanner to scan for malicious software.
* When using a wireless connection, use a robust password.
Medium businesses
* A fairly strong firewall
* A strong Antivirus software and Internet Security Software.
* For authentication, use strong passwords and change it on a bi-weekly/monthly basis.
* When using a wireless connection, use a robust password.
* Raise awareness about physical security to employees.
* Use an optional network analyzer or network monitor.
Large businesses
* A strong firewall and proxy to keep unwanted people out.
* A strong Antivirus software and Internet Security Software.
* For authentication, use strong passwords and change it on a weekly/bi-weekly basis.
* When using a wireless connection, use a robust password.
* Exercise physical security precautions to employees.
* Prepare a network analyzer or network monitor and use it when needed.
* Implement physical security management like closed circuit television for entry areas and restricted zones.
* Security fencing to mark the company's perimeter.
* Fire extinguishers for fire-sensitive areas like server rooms and security rooms.
* Security guards can help to maximize security.
Government
* A strong strong firewall and proxy to keep unwanted people out.
* A strong Antivirus software and Internet Security Software.
* Strong encryption, usually with a 256 bit key.
* Whitelist authorized wireless connection, block all else.
* All network hardware is in secure zones.
* All host should be on a private network that is invisible from the outside.
* Put all servers in a DMZ, or a firewall from the outside and from the inside.
* Security fencing to mark perimeter and set wireless range to this.
More about Network Security
Cisco's views on Network Security
Ethical Hacking - Approach to Network Security
Microsoft's Views on System and Network Security
Please read the BLOG for all latest updates on security/hackingtools/softwares and their proper usage.
|
|