AdvancedTopic 71 of 104Software & Computing
Network security basics
Firewalls, VPNs and intrusion detection protect networks.
In depth
Network defences: firewalls, VPNs, intrusion detection/prevention, segmentation, secure protocols (SSH, TLS), strong authentication and patching. Threats: eavesdropping, spoofing, DoS, man-in-the-middle, malware. Principle of defence in depth.
Key points
- Zero trust
- DMZ
- Wireless security WPA3
ExampleA firewall blocks inbound traffic except ports 80 and 443.
What is Network security basics?
Firewalls, VPNs and intrusion detection protect networks.
Why is it important to understand network security basics?
Network security protects data and services from attackers, so firewalls and monitoring are core parts of any connected system.
What does a firewall do?
It filters traffic according to rules, such as allowing only specific ports and addresses, which limits what can reach a system.
Is a VPN enough for security?
No. A VPN protects the link, but the endpoints still need patching, authentication and monitoring.
How is Network security basics used in practice?
Typical applications include blocking unexpected incoming connections to an industrial controller with a firewall, connecting remote staff to an office through a VPN and detecting unusual traffic patterns with an intrusion detection system.
What should I learn before Network security basics?
Study "HTTP and HTTPS" first (topic 70 of 104 in Software & Computing). It covers the groundwork this topic builds on.
What are the key points of Network security basics?
Zero trust. DMZ. Wireless security WPA3.
Can you give an example of Network security basics?
A firewall blocks inbound traffic except ports 80 and 443.
What comes after Network security basics?
The next topic is "Wireless networking", which builds directly on this one.
How difficult is Network security basics?
It is classed as Advanced in Software & Computing (topic 71 of 104). It is an advanced topic. It assumes you are comfortable with the intermediate topics in Software & Computing.