Domains of network security

1. Cyber Security
Chapter One
Network Security
1

2. Outline
1. Describe the network security
2. Describe the three goals of network security
3. Differentiate between security policies,
standards, guidelines and procedures
2

3. Learning Outcome
1. Discuss the three goals of network security
2. Discuss the difference between security
policies, standards, guidelines and
procedures
3

4. What is Security?
• Security
Security is about protection of assets
• Prevention
Take measures that prevent your assets from
being damaged (or stolen)
• Detection
Take measures so that you can detect when,
how, and whom an asset has been damaged
• Reaction
Take measures so that you can recover your
assets
4

5. What is Security?
5

6. What is Network Security?
Network security are set of rules and
configurations designed to protect the
integrity, confidentiality and availability of
computer networks and data using both
software and hardware technologies.
6

7. Goals of Network Security
• Confidentiality
– Prevent the disclosure of sensitive information from unauthorized
people, resources, and processes
• Integrity
– The protection of system information or processes from intentional or
accidental modification
• Availability
– The assurance that systems and data are
accessible by authorized users when needed
7

8. Tools
• Administrative
• Physical
• Technical
8

9. Security Administration
• Policies
• Standards
• Guidelines
• Procedures
1. Risk Assessment
2. Security Policy
3. Organization of Information Security
4. Asset Management
5. Human Resources Security
6. Physical and Environmental Security
7. Communications and Operations Management
8. Access Control
9. Information Systems Acquisition, Development
and Maintenance
10. Information Security Incident Management
11. Business Continuity Management
12. Compliance
Domains of Network Security
9

10. Documents Supporting Policies
• Standards – dictate specific minimum requirements
in our policies
• Guidelines – suggest the best way to accomplish
certain tasks
• Procedures – provide a method by which a policy is
accomplished (the instructions)
10

11. Example: The Policy
• All users must have a unique user ID and
password that conforms to the company
password standard
• Users must not share their password with
anyone regardless of title or position
• Passwords must not be stored in written or
any readable form
11

12. Example: The Standards
• Minimum of 8 upper- and lowercase
alphanumeric characters
• Must include a special character
• Must be changed every 30 days
12

13. Example: The Guideline
• Take a phrase
Up and At ‘em at 7
• Convert to a strong password
Up&atm@7
• To create other passwords from this phrase,
change the number, move the symbol, or
change the punctuation mark

14. Example: The Procedure
Procedure for changing a password
1. Press Control + Alt+ Delete to bring
up the log in dialog box
2. Click the “change password” button
3. Enter your current password in the
top box
4. …
14

15. References
• Omar Santos & John Stuppi (2015). CCNA Security
210-260 Official Cert Guide. Pearson Education.
• Kevin Wallace (2012). CompTIA Network+ Authorized
Cert Guide. Pearson Education.
15