Page 148 - DCAP516_COMPUTER_SECURITY
P. 148

Computer Security                                            Manmohan Sharma, Lovely Professional University




                    Notes                         Unit 12: Network Security Controls


                                     CONTENTS
                                     Objectives
                                     Introduction

                                     12.1 Comparison with Computer Security
                                     12.2 Attributes of a Secure Network
                                     12.3 Security Management for Networks

                                     12.4 Network Security Controls
                                     12.5 Summary
                                     12.6 Keywords
                                     12.7 Review Questions
                                     12.8 Further Readings

                                   Objectives


                                   After studying this unit, you will be able to:
                                       Understand the dynamics of network security

                                       Comprehend the different attributes of secured network
                                       Examine and interpret about security management of network
                                       Familiarize with basics of network security tools and techniques

                                   Introduction

                                   Network security consists of the provisions made in an underlying computer network
                                   infrastructure, policies adopted by the network administrator to protect the network and the
                                   network-accessible resources from unauthorized access and consistent and continuous monitoring
                                   and measurement of its effectiveness (lack) combined together.

                                   12.1 Comparison with Computer Security

                                   Securing network infrastructure is like securing possible entry points of attacks on a country by
                                   deploying appropriate defense. Computer security is more like providing means to protect a
                                   single PC against outside intrusion. The former is better and practical to protect the civilians
                                   from getting exposed to the attacks.

                                   The preventive measures attempt to secure the access to individual computers – the network
                                   itself – thereby protecting the computers and other shared resources such as printers, network-
                                   attached storage connected by the network. Attacks could be stopped at their entry points before
                                   they spread. As opposed to this, in computer security the measures taken are focused on securing
                                   individual computer hosts.
                                   A computer host whose security is compromised is likely to infect other hosts connected to a
                                   potentially unsecured network. A computer host’s security is vulnerable to users with higher
                                   access privileges to those hosts.



          142                               LOVELY PROFESSIONAL UNIVERSITY
   143   144   145   146   147   148   149   150   151   152   153