Hi and welcome to the Deep dive into Network,
assessments by EC console. This
is Section, 1 introduction to network.
Security Assessments in this video,
will take a look at understanding how network security
affect the business. So that's
iPhone in.
What's the key to know she's our need to understand is
what is a vulnerability to put? Simply a
vulnerability is simply security weakness
within a system.
The security vulnerability can be
found within software such as that's a box. I
can also be weak passwords on systems such
as persons, are not using complex passwords
or they can be using default passwords Edition
lead. These can be devised Miss
configurations, another key to
understanding what is an exploit to
put. Simply I exploited anything that
has the potential to actually take
advantage of his own Rosie. Remember a
vulnerability, is a security weakness. So you
can exploit was simply take advantage, of.
Security, weakness of flow in the
Target system. Usually, hackers often Scandia targets
and the purpose of why the sky is to
look for any sort of weaknesses, which
is born overseas, which they can exploit.
The thing as cybersecurity professionals, also seek
and try to discover the Vanderbilt. He's
within the organization before a hacker,
actually finds a security weakness and
exploit. It exploits is
exploits can be on local exploit
which has to be placed on
the target system and be executed locally or
it can be a remote exploit which means
to say the traductor such as a hacker, can
simply launch exploit from across the
next week and let's see, the trailer is sitting
on in one location, Crowe Center. And she
she's attacking. Let's play
born with a web server, which is any data center.
Anarchy, too much is understanding. What
is a truck? A truck to put some, please? Anything
that has the potential to cause harm or damage your
system.
It sure does anything that has the
potential to violate the components of the CIA Triad which
will take a look later down during this video.
So, it's simple example. Is it
true that doctor has the potential to actually, cause some
type of how damage to a system? Affect you
tell us What actors are usually hackers
inside a threat or any person. One
Sack or some type of data Los destructores uses
beerus attack methods and
techniques which are used to take advantage.
In other words. They use to exploit a
vulnerability within a system. So damn many
to suit in the cyber security industry, which boot
hackers aren't even say I was very professional to use.
So she tests to see what is system is vulnerable to
a specific exploit. So why did Anita
network security? Each d-des. So many
cyber threats and attacks? That is occurring. Assume a
different viruses.
Such as ransomware virus, has malware
even Trojan.
Alice thing about it is, we need a
lot of Network Security Solutions together with
professionals to help defend an organization
asset. So, within the
field of Social Security in cybersecurity information
security. The main goal
is to protect an organization assets from
any sort of threat actors.
Try doctors out of Bob people at once, or
some type of damage or even steal your data and sell it.
So assets, as simply, anything that
is of value to analyzation.
These assets can be devices such as
your router's, your firewall, even your
see, what stores will deter.
These assets can be intellectual property and
even the users on your network such as
employees.
To keep in mind Trek actors, focuses on compromising
grumbly Mansion CIA Triad C is
for confidentiality integrity and
availability for a
doctors do matter. What type of attack. They
try to perform or even become successful in
performing at the main goal is to Simply compromise
confidentiality integrity and
or availability of your
target system. So, the principles of security
is built upon the CIA Triad
which is protecting confidentiality Integrity on
availability. So, what exactly is confidentiality
confidentiality simply
shows that data is kept private and
is only accessible by an authorized
person or user. User system can
simply protect either by using various types
of data, encryption algorithm. Therefore, if
you encrypt,
A piece of data such as a message, using a
security key and you won't get that message will not
be able to read a message because it is encrypted.
If you shared a key with the old rice person, then throw
the rice person. Can you use a key to decrypt? The
data itself? The thing about being cybersecurity is
you need to know the different states
of data. Three. Main states of data
is data in motion, which is between
a system can be
moving between systems across an attitude or a
user transporting the data. And let's say,
for example, is storage device, such as he had right or
even on USB device.
There's also data dressed data is
data that is currently not being used.
So just currently on your system at the moment and
then there's data in use, beating use
SD to. That's currently being accessed by,
let's an application or a user to put
simply we need to protect data. In motion, is
simple example of protecting data in motion is
using it Boots, full price and that's weak evpn, which
was simply establish a secure tunnel
across of unsecured. Network there for
keeping the data has been transported across the
tunnel encrypted and prevent anyone
from intercepting on even gaining a
copy of the auditor.
This address is a date on your hard drive. So how
come you protect data? That is not the rest. We can
simply perform data encryption. So
you can use various encryption
tools. Such as let's say you have Windows you
can use BitLocker which allows you
to create an encrypted container. I can Place theater in.
Encrypted container unlock it. If you
use Lenox you can use locks, which will
do pretty much the same. It'll carry time in Cryptids piece
on your hard drive. However, how do
we protect you, too? And use dating you is at
its most vulnerable state, because it
is currently being used by an application.
Super Tank days in use, it's very important
that the application that is currently accessing. The
data does not contain any sort
of security vulnerabilities or flaws and
its design, the second component of the
sea. I tried is integrity Integrity, simply houses
to determine where a message was modified between
us or sauna definition. We can
use hashing algorithms, which I use to create what we
call a one-way digest of the message. And
this is known as a hash value to
digest, simply cryptographic hash, which is
a mathematical calculation, which is used to
represent the message. Each unit file,
or each week message will create a unique
value.
Availability. Simply shows a
resource is available for those who require access
to the results.
It would simply availabilities measure for
it is measured in up time. This
is how long do results as available. Annually, the
goal of maintaining availability is to
ensure that is very least down time
for system a network or a resource. So
now the big question, how does network security affect
the business? So let's take a look at it around. This
is a CIA Triad, an organization tries
to maintain a balance between these three
components. It is a storm in network,
or even a device or anything. With
an organization is compromised, Detroit. Axle
foukas has one affecting or compromising at
least. One of these components is
confidentiality is affected. The doctor
will be able to access data here. She's
not authorized to to see if the
Integrity of the system is compromised. The truck after
I can simply modify to deter causing user.
To be affected until Italy,
availability availability is affected
the results, such as a website or a web
server will not be available to the legitimate
unauthorised users. So we need
to implement Network Security Solutions. At
least solutions could be software. It could be security
appliances. And we also need
to have the right stuff on security professional
to help 19 on
Discover any sort of security flaws within our
organization and resolve these flaws, as
quickly as possible. In this video.
We took a look at this cover in the principles of
network security and have gained understanding on
nude need of network security within an
organization.
The next video, we will take a
look at exploring Network Services on
ports. I hope this video has been a foreman
to see you, and I will see you in the next one.