Network security involves all actions that organizations, enterprises, and institutions undertake to protect the value and ongoing usability of assets and the integrity and stability of operations. An effective network security strategy require identifying threats and then choose the most effective set of tools to fight them.
Threats to network security are given below:
1.) Viruses
2.) Trojan horse programs
3.) Vandals
4.) Attacks
5.) Data interception
6.) Social engineering
Network security tools are :
1.) Antivirus software packages : These packages respond to most virus threats if regularly updated and correctly maintained.
2.) Secure network infrastructure : Switches and routers have hardware and software characteristics that support secure connectivity, perimeter security, intrusion protection, identity services, and security management.
3.) Virtual private networks : These networks provide access control and data encryption between two computers on a network. This allows remote workers to connect to the network without the risk of a hacker intercepting data.
4.)Identity services : These services helps to identify users and control their actions and transactions on the network. Services comprise passwords, digital certificates, and digital authentication keys.
5.) Encryption : Encryption ensures that messages cannot be intercepted by anyone other than the authorized recipient.
6.) Security management : This is the bond that hold together the other building blocks of a strong security solution.
Network security components help to protect your device form external intrusion. Network security components, such as Internet Protocol Security (IPSec) and Secure Socket Layer/Transport Layer Security (SSL/TLS), can improve security when accessing a device over the network.
In addition if you add network security components to your configuration, other precautions should be taken to protect your device. Disabling unused ports, and removing unused services, such as Simple Network Management Protocol (SNMP), reduce the risk of intrusion.
1.) Internet Protocol Security (IPSec)- It verifies and authenticates IP packets, and the key binary for this are Ipsec.sys, Ipsecsvc.dll, Winipsec.dll
2.) Secure Socket Layer/Transport Layer Security (SSL/TLS)- It encrypts data exchanged between systems. And the required components are Local security authority subsystems(LSASS), cryptographic network services, primitive: Secur32, Primitive: Crypt32, Primitive: Cryptdll, Primitive: Netapi21, Netlogon/Netjoin.
3.) Secure RPC- Secure RPC adds security to COM+, DCOM, and RPC. The required components are RPC Local Support, Primitive: Secur32, Primitive: AuthZ, Secure RPC over Kerberos, Secure RPC over Negotiate, Secure RPC over NTLM, Secure RPC over SSl.
Loading...