Principles of Network Security

Principles of Network Security

The main Principles of network security are...

• There are two basic goals to be met in enforcing data security: 
• First, sensitive information must be kept out of sight of possible cyber criminals and any unauthorized individuals. 
• Second, cyber-security controls do not prevent access to the information by registered users. The following are the three main cyber-security concepts.

Network Security Principles

Confidentiality

• Cyber-security should ensure that the information to be protected is available only to registered users and avoids exposure to unauthorized parties to the information. 
• For example, to enforce client information security on a cloud-based Customer Relationship Management (CRM) program, access can be limited to those with the right combination of username-passwords. 
• Most applications often enforce authentication through data encryption, which provides an external security layer. 
• Data decryption requires that an person or device attempt to access the data using the correct key.
• The theory states that the information exchanged between them should only be available to the sender and recipient. Confidentiality damages when an unauthorized individual may access a document. 

Authentication

• Authentication is the process for defining the individual or the object, or device. 
• It means that the person who is attempting to access the information is known. 
• Using username and password also secures authentication. 
• The designated individual whose identity has been pre-registered may show his / her identification and access confidential details.

Integrity

• Integrity provides guarantees that the obtained information is reliable and correct. 
• If the message content is altered after it is transmitted by the sender but before it reaches the intended recipient, then the validity of the message is lost.
• Variety of mechanisms used ensures the integrity of a data unit or streams of data unit.

Non-Repudiation

• Non-repudiation is a process that avoids rejection of the content of messages received through a network. 
• In certain instances the sender will give the message and then reject it later. 
• But the non-repudiation prohibits the sender from rejecting the receiver.

Access control

• Access control theory is decided by the administration of the responsibilities and regulations. 
• Variety of processes to implement resource access rights.
• Role management defines who can access the data while regulation defines the degree to which one should access the data. 
• The details seen depends on who's using it.

Availability

• The flexibility theory specifies that the services should be accessible at all times for approving the group. 
• Data would not be of much benefit if it is not available. 
• Systems would provide ample details available to fulfill customer demands.
• An approved party should not be hindering its access to sensitive information in cyberspace. 
• In fact, the architecture of cyber-security must allow for access to backups in the event of any outage. 
• For example, as a security mechanism against Denial of Service (DoS) attacks, the organization using the cloud-based CRM program might install proxy servers and firewalls, which will cause network unavailability if successful.
• Network systems are set in order to provide network support. A security service is a protocol-based service which ensures adequate system protection. 
• A security service can be defined as a service that a system provides to provide system resources a particular form of protection. 
• Intelligence forces enforce security policies and provide compliance frameworks in operation.

Encryption

• Usage of mathematical logarithms to transform data into a shape not readily understandable or in other way we can say encryption is the process of transforming data from one form to another form. 

Data signature

• Information added to an information unit cryptographic transfer that helps the receiver to verify the data unit's origins and validity, and to defend against forgery.

Traffic paddling

• It is the addition of bits into data stream holes to frustrate efforts to examine the flow.

Authentication exchange

• It is a process introduced to maintain an entity's identity through the sharing of information.

Notarization

• That is the use of a trustworthy third party to guarantee that a data exchange respects those conditions.

Routing control

• Requires the inclusion of specified physical safe routes for such data and requires improvements in the routing; where a security violation is suspected.

Security level

• It is the rendering attached to a resource; it may be unit details, whose name, or the protection attributes of that specific resource are assigned. 
• Potentially, data collection may be used to enable a compliance assessment, which is an unbiased evaluation, and analysis of device documents and activities.