Network Security - Research Activity

-
For each of the tools:

  • Provide the description
  • Discuss its purpose
  • Give the advantages (2) and disadvantages (2)
  • Explain why organizations need to implement it
  • Explain what will happen if it is not configured / set up properly

DMZ (Demilitarized Zone)

Description
DMZ is a secure server where as an additional security that acts as an immigration between the Local Area Network (LAN) and the Internet.

Purpose
It checks whether the user is authorized or unauthorized to access to the Internet.

Advantages
- Adding the DMZ on the Local Area Network (LAN) can improve the network security.
- Unauthorized user cannot stole any information because they are restricted from accessing to the network.

Disadvantages
- Some users or employees cannot upload and download the web pages or other files.
- The DMZ can only be used to one network only (Cannot combine with private and public network on the same system).

The organization needs to implement the DMZ because the it can enhance or improved the Local Area Network (LAN) of the organization.

If its not configured/set up properly, the employees inside the organization cannot access to some of the network where the employees cannot just access to the website by the web server, but they also cannot use the printer which use the print server).

https://getthehelp.wordpress.com/2015/09/08/advantage-disadvantage-of-using-dmz/

NAT (Network Address Translation)

Description
NAT is a process where one or more local IP address are translated or converted into another IP address in order to make the network secure.

Purpose
It is used to hide the real local IP address of the user from the Internet.

Advantages
- To hide the real IP address from unauthorized access of system by the hacker.
- Improved the flexibility when connecting onto the public internet.

Disadvantages
- It can cause a delay on the IPv4 communication
- It can cause loss of IP traceability from the end-device to end-device.

The organization needs to implement the NAT because it can prevent from the unauthorized user from stealing the IPv4 addresses and access the local IP address of the employees inside the organization.

If its not configured properly, some of the technologies and the network applications will not be functioning.

https://whatismyipaddress.com/nat
http://www.omnisecu.com/cisco-certified-network-associate-ccna/advantages-and-disadvantages-of-nat.php

FWs (Firewalls)
https://www.quora.com/What-are-the-impacts-of-incorrect-firewall-configurations

Description
Firewall is a system which is designed to prevent from unauthorized access to the network by blocking the Internet. Firewall can be a software and also a hardware.

Purpose
It is used to check and prevent the unauthorized internet to access to the network.

Advantage
-
-
Disadvantage
-
-

The organization needs to implement the Firewalls because this can make sure that the employees from the organization can access to the trusted website only and therefore, this can secure the network by preventing the employees from accessing to unknown website.

If its not set up properly, Firewalls will not work and the users cannot know whether the website that they access are secure or not.

https://searchmidmarketsecurity.techtarget.com/definition/network-scanning
https://www.techopedia.com/definition/4160/vulnerability-scanning

https://www.cwps.com/blog/the-advantages-to-using-a-network-monitoring-service
https://searchnetworking.techtarget.com/definition/network-monitoring

Comments

Post a Comment

Popular posts from this blog

WAN Technology

-
Image
MPLS Describe MPLS is stands for Multiprotocol label switching which is a mechanism used inside the computer network infrastructures to speed up the time it takes a data packet to flow from a node to another. Diagram How it works In MPLS , packets are directed through the network based on an assigned label with original IP routing in a packet- switched network, each data packet could determine its own path through the network. Examples Traffic engineering network management ATM Description ATM is a technique for packet switching that is used by telecommunication networks which they used asynchronous time-division multiplexing to encode data into small fixed sized cells. It is known as Asynchronous Transfer Mode. Diagram How it works The sender and receiver on a network creates a fixed channel between each other before sending the data and then the information will be sent in order. Example It is used in the campus backbone. References Tech...
Read more

LO3 - Know the features and functions of information systems

-
3.1 Features of Information Systems An information system has 5 parts: Data Raw information The data input to the system must be accurate It should be stored in logical way such as pen drive and hard disk. People People are involved both in capturing the data and manage the information. Hardware Management information system (MIS) may run on just the sales and finance director's PC. It usually runs on a server, either shared or dedicated with Internet or intranet access for those who need it. Used for storing data. It is unusual to require specialized hardware. computer and server Software MIS can be built using standard software. manage the information in the computer. Telecommunications To connect with the use of internet. MIS are delivered across an intranet within a company's firewall for protection from competitors and others seeking this valuable management information. Used to protect and secure the data. 3.2 Functions of Information Systems ...
Read more

WDD - LO1 - MANAGE SECURE SITES

-
1. Keep the Software Up to Date Always keep the website to be up to date so that no hacker will not easily access onto the information from the web server. - Need to keep the website up to date so that to protect it from getting new threats. 2. Block SQL Injection SQL injection is an attack which vulnerable on bypassing the security of the website application. By inputting validation and limiting the queries can prevent the SQL injection attacks. - adding of codes to the database with a proper language 3. Prevent XSS Cross-site Scripting (XSS) will manipulate the vulnerable website into a malicious code for the user and when it is executed, the attacker can access and interact with the user's application. - Client-side - the attacker create a script or code to bypass the security of the application. 4. Providing Minimal Error Messages  Creating a least error messages for the website to be secured so that the information of the website will not be lost. such as Err...
Read more