View source for Network security

'''Network security''' consists of the provisions made in an underlying [[computer network]] infrastructure, [[Network security policy|policies]] adopted by the [[network administrator]] to protect the network and the network-accessible resources from [[Authorization|unauthorized]] access and the effectiveness (or lack) of these measures combined together.

==Network security vs. computer security==
Securing  network infrastructure is like securing possible entry points of attacks on a country by deploying appropriate [[Defence (military)|defense]]. Computer security is more like providing means to protect a pc against outside intrusion.

==Attributes of a secure network==
Network security starts from [[Authentication|authenticating]] any user. Once authenticated, [[Firewall (networking)|firewall]] enforces access policies such as what services are allowed to be accessed by the network users.<ref>A Role-Based Trusted Network Provides [http://newsroom.cisco.com/dlls/2008/ts_010208b.html?sid=BAC-NewsWire Pervasive Security and Compliance] - interview with [[Jayshree Ullal]], senior VP of [[Cisco]]</ref> Though effective to prevent unauthorized access, this component fails to check potentially harmful contents such as [[computer worm]]s being transmitted over the network. An [[intrusion prevention system]] (IPS)<ref>Dave Dittrich, [http://staff.washington.edu/dittrich/network.html ''Network monitoring/Intrusion Detection Systems (IDS)''], University of Washington.</ref> helps detect and prevent such [[malware]]. IPS also [[Deep packet inspection|monitors for suspicious network traffic]] for contents, volume and [[Anomaly-based intrusion detection system|anomalies]] to protect the network from attacks such as [[denial of service]]. Communication between two hosts using the network could be encrypted to [[Virtual private network|maintain privacy]]. Individual events occurring on the network could be tracked for audit purposes and for a later high level analysis.

[[Honeypot (computing)|''Honeypots'']], essentially [[decoy]] network-accessible resources, could be deployed in a network as surveillance and early-warning tools. Techniques used by the attackers that attempt to compromise these decoy resources are studied during and after an attack to keep an eye on new [[Exploit (computer security)|exploitation]] techniques. Such analysis could be used to further tighten security of the actual network being protected by the honeypot.<ref>[http://www.honeypots.net ''Honeypots, Honeynets'']</ref>

==References==
<div class="references-small">
<references/>
*[http://www.cert.org/encyc_article/tocencyc.html Security of the Internet] (''The Froehlich/Kent Encyclopedia of Telecommunications vol. 15''. Marcel Dekker, New York, 1997, pp. 231-255.)
*[http://www.interhack.net/pubs/network-security ''Introduction to Network Security''], Matt Curtin.
</div>

== Books about Network Security ==
<div class="references-small">
* [http://www.ciscopress.com/bookstore/product.asp?isbn=1587052539][''Self-Defending Networks: The Next Generation of Network Security'']], Duane DeCapite, Cisco Press, Sep. 8, 2006.  
* [[http://www.ciscopress.com/bookstore/product.asp?isbn=1587052601]]''Security Threat Mitigation and Response: Understanding CS-MARS'', Dale Tesch/Greg Abelar, Cisco Press, Sep. 26, 2006.  
* [http://www.ciscopress.com/bookstore/product.asp?isbn=1587053101] [''Deploying Zone-Based Firewalls''], Ivan Pepelnjak, Cisco Press, Oct. 5, 2006.  
*''Network Security: PRIVATE Communication in a PUBLIC World'', Charlie Kaufman | Radia Perlman | Mike Speciner, Prentice-Hall, 2002.  ISBN .
</div>

==See also==
<div style="-moz-column-count:2; column-count:2;">
*[[Crimeware]]
*[[Data Loss Prevention]]
*[[Wireless LAN Security]]
*[[Timeline of hacker history]]
*[[Information Leak Prevention]]
</div>

==External links==
<div style="-moz-column-count:2; column-count:2;">
*[http://www.cisco.com/web/about/ciscoitatwork/case_studies/security.html Cisco IT Case Studies] about Security and VPN
* [http://www.netevents.tv/docuplayer.asp?docid=102 Debate: The data or the source - which is the real threat to network security? - Video]
*[http://www.sans.org/network_security.php SANS Institute network security resources]

</div>

[[Category:Computer network security]]

[[de:Netzwerksicherheit]]
[[nl:Netwerkbeveiliging]]
[[zh:网络安全]]