Amelia Rose Smith 231233678 CARNEGIE MELLON UNIVERSITY Cyber threats : Network Security 1. Describe the function of firewalls in a network's security. Describe the many kinds of firewalls and the benefits and drawbacks of each one. Give an illustration of the use of a firewall to shield a network from a cyberattack. By limiting accessibility to and from the internet, obstructing unlawful traffic, and keeping an eye on network activity for possible dangers, firewalls are crucial for keeping a network secure. Filtering packets firewalls, stateful examination firewalls, and implementation-level firewalls are the three basic categories of firewalls. The most fundamental kind of firewalls are packet filtering firewalls, which evaluate network traffic at the packet level. Firewalls with stateful inspection monitor connections and permit only permitted traffic to pass. The most sophisticated kind of firewalls may filter traffic depending on the particular application layer protocol that is employed, and they are called application-level firewalls. Each form of firewall has its benefits and drawbacks. For instance, while packet filtering firewalls are quick and effective, they cannot examine activity at the application level. Application-level firewalls, on the other hand, offer more sophisticated security capabilities but might be slower and more difficult to administer.By establishing a firewall to prevent incoming traffic from dubious IP addresses or to restrict outgoing traffic to established and trusted services, for instance, a network can be protected from a cyber assault. Since they put up a wall between a network and outside networks like the internet, firewalls are crucial for network security. Based on a set of predetermined criteria, they assess the network data that comes in and goes out to decide whether to allow or prohibit certain communication. Firewalls may guard against malware as well as other cyberattacks, stop unwanted access to networks, and monitor network traffic for signs of security lapses. When deciding whether to allow or block a packet, packet filtering firewalls look at the header data, including both the origin and destination IP addresses and port numbers. Although they are quick and effective, they cannot examine traffic at the application level. Firewalls with stateful inspection monitor the status of network connections and let only permitted traffic through. To decide whether to accept or block the packet, they go through the entire packet, including the header and content, and utilize information about the connection's status. Stateful inspection firewalls offer higher security and are more sophisticated than packet filtering firewalls. The most sophisticated kind of firewalls are application-level firewalls, sometimes referred to as proxy firewalls.They are able to detect and stop malicious traffic as well as filter traffic depending on the application layer protocol that is being utilized.Application-level firewalls offer more sophisticated security capabilities but are slower and more difficult to administer than filtering packets and stateful inspection firewalls. By establishing a firewall to prevent incoming traffic from dubious IP addresses or to restrict outgoing traffic to established and trusted services, for instance, a network can be protected from a cyber assault.An enterprise might set up its firewall, for instance, to prevent traffic from nations where it has no commercial operations or to restrict outbound traffic to certain services like email and web surfing.By doing so, malware may be prevented from contacting the command and control centers or from stealing data from the network. 2. The usage of Virtual Private Networks (VPN) to encrypt network communication is rather common. Talk about the benefits and drawbacks of utilizing a VPN to safeguard a network. What aspects should a company take into account before determining whether to employ a VPN? Give an illustration of how to use a VPN to secure a network. Virtual Private Networks (VPNs) are a well-liked method for encrypting traffic among remote users and the network, which helps to protect network connection. VPNs have a number of benefits, including the ability to connect securely over insecure networks, having remote access to computer resources, and a lower danger of data eavesdropping. VPNs do, however, offer significant drawbacks, such as the possibility of performance concerns brought on by the expense of encryption and the requirement to operate and maintain the VPN architecture. Organizations should think about things like the importance of the data being communicated, the number of distant users, and their financial capabilities and resources when considering whether to employ a VPN. By setting up a VPN to enable remote workers to safely access business resources, including files and apps, from a remote location, one may demonstrate how a VPN can be used to safeguard a network. Users are able to connect to a secure network over the internet thanks to the virtual private network (VPN) technology. By establishing an encrypted tunnel across the gadget being used and the network, a VPN prevents hackers from intercepting or manipulating the data sent between them. Different protocols are used by VPNs to set up and preserve the encrypted tunnel. The most widely used protocols are L2TP/IPSec (Layer 2 Tunneling Protocol over IP Security), OpenVPN, and PPTP (Point-to-Point Tunneling Protocol). The least secure of the three protocols is PPTP, which has been around the longest. L2TP/IPSec and OpenVPN are thought to be more safe since they employ powerful encryption algorithms. The ability to access the internet from distant locations without risking security is one advantage of utilizing a VPN. For instance, a remote worker can access files and programs as if they were actually in the office by connecting to the company's network over a VPN. This is particularly crucial in the remote work world of today, when many workers operate from home or while traveling. Utilizing a VPN also has the advantage of preserving users' online privacy. A VPN stops internet service providers (ISPs) as well as other third parties from tracking customers' online activities and gathering their personal data by encrypting all internet traffic. However, VPNs are not impenetrable and can still be subject to online threats.Cybercriminals might, for instance, collect and interpret the data exchanged between a user and the network if a VPN's encryption is poor or broken. Additionally, if a user's device has malware on it, the VPN and the network's security may be jeopardized. Utilizing a reliable VPN provider with strong encryption and security protocols is crucial to reducing these risks.It's also crucial to implement extra security measures like multi-factor authentication and endpoint protection, as well as to maintain hardware and software up to date with the most recent security updates. 3. A crucial element of network security is encryption. Describe the various forms of encryption and its advantages and disadvantages. Give an illustration of the use of encryption to protect network data. What obstacles must be overcome in order to deploy encryption in a network environment? A key element of network security that may shield data from illicit access and interception is encryption. Hashing, encryption with a symmetric key, and asymmetric key encryption are some of the several kinds of encryption. While asymmetric key security uses different keys for decryption and encryption, symmetric key encryption utilizes the same key to encrypt and decrypt data. A one-way encryption technique called hashing produces a distinct digital fingerprint of the data that may be used to confirm its integrity. Each encryption method has advantages and disadvantages of its own. For instance, symmetric key encryption is quick and effective but is susceptible to key management and distribution problems. Although it offers better security, asymmetric key encryption can be slower and more difficult to implement.Encrypting sensitive data, including passwords, credit card numbers, and other personal data, using powerful encryption algorithms and keys is one way encryption may be used to safeguard network data. The implementation of encryption in a network context presents a number of difficulties, such as handling keys and certificates, addressing performance overhead, and assuring compatibility with various hardware and applications. These difficulties may be solved with careful design, sound key management, and routine inspection and upkeep. When ordinary text is encrypted, it is turned into cipher text, which cannot be decrypted without the proper key. Because it can shield sensitive data from unauthorized access, interception, and manipulation by cybercriminals, encryption is a key component of network security. There are several kinds of encryption methods, such as symmetric and asymmetric encryption. Asymmetric encryption employs a common key for encryption and a secret key for decryption, whereas symmetrical encryption uses just one key for both operations. Secure Sockets Layer/Transport Layer Security (SSL/TLS) is a popular encryption method used in network security. Data transferred over the internet, including web traffic, email, and instant chats, is encrypted using the SSL/TLS protocol. For secure communication between two parties, SSL/TLS combines symmetric and asymmetric encryption. File encryption is another popular encryption method used in network security. To prevent unwanted access, a file or collection of files are encrypted using the technique of file encryption. Sensitive data, including financial data, personal information, and intellectual property, are frequently protected in this way. In order to offer a multi-layered security strategy, encryption may also be used in conjunction with other security measures like access control, firewalls, and intrusion detection systems. However, encryption is not impenetrable and can still be subject to online threats. For instance, if a user's encryption key is stolen, cybercriminals can decrypt the data that has been encrypted. Additionally, cybercriminals may employ brute force methods to decrypt data if the encryption algorithm used is faulty or compromised. It's crucial to utilize powerful encryption algorithms and keys and to keep encryption keys safe in order to reduce these hazards.Additionally, it's crucial to use extra safety precautions like intrusion prevention and detection systems and to routinely update encryption software.