Network Security
Network security protects computer networks and their traffic from unauthorized access, misuse, and disruption. It combines hardware, software, and policy controls to defend data in transit and the infrastructure that carries it.
itDefensive security and security operations | OpenSkills.info
Course pathWalk it in order
Look it upDip in anytime
Go furtherLeaves this page
Intro
Network Security
Network security prevents unauthorized access to, misuse of, and disruption of computer networks and the data that travels across them. It is the set of controls — hardware, software, and policy — that keeps network infrastructure trustworthy and traffic confidential, intact, and available.
The useful mental model is layers of defense around data in motion and the devices that move it.
policy → perimeter controls → internal segmentation → endpoint protection → monitoring
↑ ↓
└──────────────── incident response and continuous improvement ────────────┘
Every network carries traffic between systems that trust each other to varying degrees. Network security decides which traffic is permitted, inspects what flows, detects what deviates from expected behavior, and responds when something goes wrong.
Why network security matters
Every organization depends on network connectivity. Email, file storage, applications, cloud services, industrial control systems, and remote access all rely on networks. An attacker who controls or observes network traffic can steal credentials, exfiltrate data, disrupt services, or pivot deeper into systems.
Network security exists because:
Continue the course
This section is part of the paid course.
See pricing to subscribe, or log in if you already have access.
Where this skill leads
Relevant careers
See how this topic contributes to broader role-level skill maps.
Sources
- https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final
Supports
- SC (System and Communications Protection) family defining boundary protection, encryption, and network controls
- AC (Access Control) family defining network access, least privilege, and separation of duties
- Defense-in-depth as layered controls at network, transport, and application layers
- SC-7 Boundary Protection requiring managed interfaces and deny-by-default policies
- Segmentation, firewall, IDS/IPS, and access control claims throughout the course
- Quiz answers about deny-by-default, segmentation purpose, and stale firewall rules
- https://csrc.nist.gov/pubs/sp/800/207/final
Supports
- Zero Trust Architecture definition and core tenets
- Network location as insufficient for access decisions
- Per-request verification with identity, device, and context
- Incremental adoption recommendations
- Quiz answers about zero trust versus perimeter security and adoption strategy
- https://www.nist.gov/cyberframework
Supports
- Risk-based framework with govern, identify, protect, detect, respond, and recover functions
- Mapping network security controls to organizational risk outcomes
- Referenced in standards comparison slide and cheatsheet
- https://csrc.nist.gov/pubs/sp/800/94/final
Supports
- IDPS technology types (network-based, wireless, host-based, network behavior analysis)
- IDS versus IPS distinction (passive alert versus inline blocking)
- Signature-based versus anomaly-based detection
- Deployment placement recommendations
- Quiz answer about IDS passive mode
- https://csrc.nist.gov/pubs/sp/800/41/r1/final
Supports
- Firewall types and generations (packet filter, stateful, application-layer)
- Firewall policy design principles and rule management
- Quiz answer about stateful inspection
- https://csrc.nist.gov/pubs/sp/800/215/final
Supports
- Secure enterprise network landscape including cloud and remote access
- Evolution from perimeter-centric to distributed network security
- How traditional approaches adapt when network boundaries dissolve
- https://www.cisa.gov/resources-tools/resources/guidance-and-strategies-protect-network-edge-devices
Supports
- Hardening guidance for firewalls, routers, VPN gateways, and IoT devices
- Network edge as a high-value target requiring specific security attention
- Quiz answer about DNS tunneling detection and TLS inspection risks
- https://www.cisa.gov/zero-trust-maturity-model
Supports
- Maturity model for incremental zero trust adoption
- Pillars covering identity, devices, networks, applications, and data
- Quiz answer about phased zero trust adoption strategy
- https://www.cisecurity.org/controls
Supports
- Prioritized security safeguards organized in implementation groups
- Control 9 (Email and Web Browser Protections)
- Control 12 (Network Infrastructure Management)
- Control 13 (Network Monitoring and Defense)
- Segmentation and firewall rule review claims
- https://csrc.nist.gov/pubs/sp/800/153/final
Supports
- Wireless network security guidelines
- WPA2/WPA3 recommendations and enterprise deployment
- https://www.wi-fi.org/discover-wi-fi/security
Supports
- WPA3 specification overview including SAE handshake
- Forward secrecy and resistance to offline dictionary attacks
- Protected Management Frames requirement
- Quiz answer about WPA3 advantages over WPA2
- https://csrc.nist.gov/pubs/sp/800/77/r1/final
Supports
- IPsec VPN architecture and deployment guidance
- Transport and tunnel mode distinctions
- Site-to-site and remote access VPN claims
- https://www.snort.org/
Supports
- Snort as open-source IDS/IPS maintained by Cisco
- Signature-based detection capabilities
- Quiz answer about IDS alert-only behavior
- https://csrc.nist.gov/glossary/term/defense_in_depth
Supports
- Defense in depth as layered countermeasures achieving security objectives
- Glossary definition
- https://csrc.nist.gov/glossary/term/least_privilege
Supports
- Least privilege as restricting authorizations to those needed for a task
- Glossary definition and access control principle
