Unit 4609: Network Security Fundamentals

1. Introduction to Network Security

• Importance of securing networks
• Common network threats: malware, phishing, DoS/DDoS, insider threats
• Basic security principles: confidentiality, integrity, availability (CIA Triad)
• Defense in depth strategy

2. Cryptography Basics

• Definition and purpose of cryptography
• Encryption and decryption processes
• Symmetric encryption algorithms: AES, DES
• Asymmetric encryption algorithms: RSA, ECC
• Digital signatures and their role in authentication

3. Network Security Protocols

• Overview of network communication security
• SSL/TLS: securing web traffic (HTTPS)
• IPsec: securing IP communications
• SSH: secure remote administration
• VPN protocols: PPTP, L2TP, OpenVPN, and their use cases

4. Firewalls and Intrusion Detection Systems (IDS)

• Firewall types: packet-filtering, stateful, proxy
• Firewall configuration basics and policies
• Intrusion Detection Systems: signature-based vs anomaly-based
• Role of IDS in detecting and alerting on intrusions

5. Public Key Infrastructure (PKI)

• Components of PKI: digital certificates, certificate authorities (CA), registration authorities (RA)
• Certificate lifecycle and management
• Role of PKI in enabling trust and secure communications

6. Secure Socket Layer / Transport Layer Security (SSL/TLS)

• History and evolution from SSL to TLS
• How SSL/TLS establishes secure sessions
• Handshake process and certificate verification
• Importance in protecting data in transit

7. Cryptographic Hash Functions

• Definition and characteristics of hash functions
• Common hash algorithms: MD5, SHA-1, SHA-256
• Use cases: data integrity verification, password hashing, digital signatures

8. Wireless Network Security

• Security challenges unique to wireless networks
• Encryption standards: WEP, WPA, WPA2, WPA3
• Best practices for securing wireless access points
• Risks of unsecured wireless networks and countermeasures

9. Cyber Threat Intelligence

• Definition and purpose of threat intelligence
• Collection methods: open source, dark web, honeypots
• Analysis and dissemination of intelligence
• Using threat intelligence for proactive defense

10. Security Risk Management

• Principles of risk management in cybersecurity
• Risk assessment methodologies
• Mitigation strategies and controls
• Incident response planning and execution
• Compliance with security standards and regulations (e.g., GDPR, ISO 27001)