Network Security

Network Security Issues – major threats and the means to fight them Network security issues are the top priority of all who want to protect their data.

Security is a fundamental aspect of any network infrastructure. The goal is to always have the most up to date programs and protocols to ensure the protection of the network. No aspect is too small to over look. That could mean the difference between a secure network and a compromised network. The best way to achieve this is to break down every level and approach each one as a separate entity and secure it. Then you can modify it to suit the needs of your network.

There are different IT Security systems to meet different needs, such as advanced imaging technology, Carnivore, and Digital Fingerprinting. Advanced imaging technology is used to monitor passengers in transportation services, such as airports, for metallic and non-metallic threats to security. Carnivore was used for monitoring emails of persons under criminal activity suspensions by the FBI. Digital Fingerprinting is used to monitor web activity for violations of pieces of media under copyright law.

The correct configuration of security technologies is mandatory to balance the need for access and safety of information (Cavusoglu & Raghunathan, 2009). Many companies use the layered approach to ensure protection of their network information system (Cavusoglu & Raghunathan, 2009). By using this approach, many security technologies rely on each other to operate effectively (Cavusoglu & Raghunathan, 2009). Three technologies commonly used together are Intrusion Detection Systems, Intrusion Prevention Systems, and firewalls. When configured properly, these technologies complement each other (Cavusoglu & Raghunathan, 2009).

In order to design and construct a well-secured network, many features must be taken into consideration, such as the topology and placement of hosts within the network, the selection of hardware and software technologies, and the successful arrangement of each component. I will discuss securing a LAN from the viewpoint of the network architect considering two main areas: the network topology which comprises the physical and logical design of the network; and securing the routers and switches which connect segments and hosts to form the network.

One of the most important aspects of network security is a strong network security model. The network security model consists of seven layers that work together to provide the strongest possible security for the network. The seven layers are the physical layer, the vlan layer, the software layer, the user layer, the administrative layer, and the IT department layer. A network security model that is well thought out and designed allows the network security team to analyze and maintain the network and determine if there has been a breach and the location of the breach.

**This document meets a request for proposal from FTD Enterprises to implement a security infrastructure and other tasks stated in the proposal.

The introduction of networking has led to development of ever changing technologies beyond our imagination. One has to be sound and up to date with these technologies to keep up with constantly evolving and dynamic world. In the process, we forget the importance of privacy of our personal data. The thick line between public and private has blurred in the past decade. Imagine the era of Adam and Eve; even they were not spared for their personal secrets of life; then, how can we imagine things to be different in the current scenario?

The primary objective of a network security system is to, in a cost effective manner, balance convenient access to legitimate users and inaccessibility to attackers. In a nutshell, the goal is to prevent connectivity to anyone intending to cause harm to the network. The harm to which this paper refers can come in the following forms:

Keeping a network secured is always mandatory because information cannot be share by a person who is unauthorized and network security is an advanced procedure where it will prevent possible access or misuse of information on network or modify any data on the network without having an access to it. There are several ways of network security by which a network can be secured.

Accessing other user’s files: Users may not alter or copy a file belonging to another User without first obtaining permission from the owner of the file. Ability to read, alter, or copy a file belonging to another User does not imply permission to read, after, or copy that file. Users may not use the computer system to “snoop” or pry into the affairs of other users by unnecessarily reviewing their files and e-mail.

Generally, computer network security systems and structures considered robust are preceded not by software and hardware but by careful planning. A typical computer network security plan must take into consideration a wide range of security risks and vulnerabilities and from that, develop a road map to reduce such exposure. Given the need to protect the integrity and confidentiality of data as well as other system quality attributes, the need to mitigate exposure cannot be overstated.

It has been demonstrated that a number of interoperable systems must be implemented to fully protect a network; a strategy known as Defense in Depth. Due to the multitude of security devices and device categories available, it can be very difficult to identify the correct tools for meeting security

The nature of security makes its implementation more difficult, since users are not security oriented by default, not deliberately but instinctively. Defense against attacks should be deployed on end-systems as well as LAN-wide boundary controllers. In addition, it better to specify a white-list of hosts that should never be blocked. The white-list is a simple means to prevent spoofing attacks from tricking the defense into blocking essential services (ÖNDER 2007).

For one to design and come up with a very well-secured network, there are a number of factors that have to be taken into consideration. They include the topography and the place meant of hosts within the network, the careful configuration of each component and lastly the selection of software and hardware technologies. This project focuses on the designing of a secure Local Area Network as well as some of the best practices suggested by the security experts. The three areas in which I will focus include : network topology which comprises of the physical and logical design of the network, the ways of securing the switches and routers that connect segments and hosts to and from the network and lastly the the advanced techniques in network security.