Networking Explained, Second Edition

In this chapter we discuss various concepts of network security, including techniques, issues, and problems involved in implementing a safe and secure network environment. The material in this chapter represents an overview of network security, not a detailed treatise. An outline of the terms and concepts we define and discuss follows:
Network Security Overview (Question 1)
Threat Assessment and Risk Analysis (Questions 2 11)
Social Engineering, Denial of Service, and Applications (Questions 12 21)
Network Security Preparations and Measures (Questions 22 27)
Firewalls (Questions 28 35)
Cryptography and Encryption: DES, AES, RSA, PGP (Questions 36 52)
Authentication: Digital Certificates, Smart Cards, and Kerberos (Question 53)
Internet Security and Virtual Private Networks (VPNs) (Questions 54 57)
What is network security?
Network security is defined as the proper safeguarding of all components associated with a network including data, media, and infrastructure. A comprehensive approach to network security involves three essential elements, namely, accurate threat assessment, use of the best cryptographic tools available, and deployment of effective network access control products (e.g., firewalls). Perhaps most importantly, network security may only be achieved by ensuring that all network resources are used in compliance with a prescribed corporate policy and only by authorized personnel.
In light of ongoing cracker attacks and the proliferation of viruses, most people agree that network security is one of the most pressing issues today. Every organization requires it, but few have a firm grasp on how best to achieve it. There are many ways to achieve varying levels of network security. However,...