Advanced Tech

Introduction to Computer and Network Security

Covers protection of standalone computer systems from internal threats and protection of data during transmission over networks from external attacks.

<p></p><p></p><p></p><p></p><h2><span data-leq-manual-style="1" style="font-size:24px"></span>1. COMPUTER SECURITY</h2><h2><span style="font-weight:normal">Definition: Protection of a single, standalone computer system and its resources from unauthorized access, use, modification and destruction.</span></h2><h2>What it protects? 3 Components:</h2><h2>a) Hardware Security:<br><span style="font-weight:normal">Physical parts of computer.</span></h2><h2><span style="font-weight:normal">Threats: Theft of laptop, hard disk damage, power failure.</span></h2><h2><span style="font-weight:normal">Protection: Locking room, CCTV, UPS, Biometric lock.</span></h2><h2>b) Software Security:<br><span style="font-weight:normal">Operating System and applications.</span></h2><h2><span style="font-weight:normal">Threats: Virus modifying system files, pirated software, Trojan.</span></h2><h2><span style="font-weight:normal">Protection: Antivirus, Regular updates, Licensed software, Firewall.</span></h2><h2>c) Data Security:<br><span style="font-weight:normal">Files stored inside computer.</span></h2><h2><span style="font-weight:normal">Threats: Accidental deletion, ransomware encrypting data, insider copying data.</span></h2><h2><span style="font-weight:normal">Protection: Login password, Backup, Encryption with BitLocker.</span></h2><div><span style="font-weight:normal"><br></span></div><h2>Key Goals of Computer Security -<span style="color:rgb(0, 0, 0)"> CIA:</span></h2><h2><span style="color:rgb(0, 0, 0)">1.Confidentiality: </span><span style="color:rgb(0, 0, 0);font-weight:normal">No one else can see my data.</span></h2><h2>2.Integrity: <span style="font-weight:normal">No one can change my data.</span></h2><h2>3.Availability:<span style="font-weight:normal"> My computer is available when I need it.</span></h2><h2><span style="font-weight:normal">Example: You put a Windows login password and install Quick Heal Antivirus - This is Computer Security.</span></h2><h1><span style="color:rgb(0, 0, 0)">2. NETWORK SECURITY</span></h1><p><span data-leq-manual-style="1" style="font-size:22px">Definition: Protection of data when it travels over a network and protection of the network infrastructure itself from attacks.</span></p><p><span data-leq-manual-style="1" style="font-size:22px"><span><strong>Why it is needed?</strong></span><br>In computer security, attacker must have physical access. But in network security, attacker can attack from anywhere in the world via internet.</span></p><p><span data-leq-manual-style="1" style="font-size:32px"><span data-leq-manual-style="1" style="font-size:24px"><strong>What it protects?</strong></span></span></p><p><span data-leq-manual-style="1" style="font-size:32px"><span data-leq-manual-style="1" style="font-size:24px"><strong>a) Data in Transit:</strong></span></span><br><span data-leq-manual-style="1" style="font-size:32px"><span data-leq-manual-style="1" style="font-size:24px">Data going from your phone to server.</span></span></p><p><span data-leq-manual-style="1" style="font-size:32px"><span data-leq-manual-style="1" style="font-size:24px">Threats: Packet sniffing, Man-in-the-Middle, Session Hijacking.</span></span></p><p><span data-leq-manual-style="1" style="font-size:32px"><span data-leq-manual-style="1" style="font-size:24px">Protection: Encryption - HTTPS, SSL/TLS, VPN.</span></span></p><p><span data-leq-manual-style="1" style="font-size:28px"><span data-leq-manual-style="1" style="font-size:24px"><strong>b) Network Infrastructure:</strong></span></span><br><span data-leq-manual-style="1" style="font-size:28px"><span data-leq-manual-style="1" style="font-size:24px">Routers, Switches, Servers.</span></span></p><p><span data-leq-manual-style="1" style="font-size:28px"><span data-leq-manual-style="1" style="font-size:24px">Threats: DDoS attack, IP Spoofing, ARP Spoofing, Port Scanning.</span></span></p><p><span data-leq-manual-style="1" style="font-size:28px"><span data-leq-manual-style="1" style="font-size:24px">Protection: Firewall, IDS/IPS, Access Control Lists.</span></span></p><p><span><strong><span data-leq-manual-style="1" style="font-size:28px">Main Difference Table</span></strong></span></p><table><tbody><tr><th><strong>Computer Security  </strong> </th><th><strong>Network Security</strong></th></tr><tr><td style="text-align:center">Protects ONE computer </td><td style="text-align:center">Protects data between MANY computers </td></tr><tr><td style="text-align:center">Attacker needs physical or local access </td><td style="text-align:center">Attacker can be remote from any country</td></tr><tr><td style="text-align:center">Control: Antivirus, User password</td><td style="text-align:center">Control: Firewall, VPN, HTTPS </td></tr><tr><td style="text-align:center">Protects data at REST</td><td style="text-align:center">Protects data in MOTION</td></tr></tbody></table><p><br></p><p><span data-leq-manual-style="1" style="font-size:24px"><strong>Layers of Network Security:</strong></span></p><p><span data-leq-manual-style="1" style="font-size:24px"><span><strong>1.Perimeter Security:</strong></span> Firewall at entry of network.</span></p><p><span data-leq-manual-style="1" style="font-size:24px"><span><strong>2.Authentication Security: </strong></span>Only valid users can enter network via ID/Password/OTP.</span></p><p><span data-leq-manual-style="1" style="font-size:24px"><span><strong>3.Data Security: </strong></span>Even if hacker enters, he can't read data because it is encrypted.</span></p><p></p><p></p><p></p><p></p>