Networking Chapter 9 will teach students how to develop a network security policy

Guide to Networking Essentials, Eighth Edition 9-1

Chapter 9

Introduction to Network Security

At a Glance

Instructor’s Manual Table of Contents

• Overview

• Objectives

• Teaching Tips

• Quick Quizzes

• Class Discussion Topics

• Additional Projects

• Additional Resources

• Key Terms

• Technical Notes for Hands-On Projects

• Using Virtualization for Hands-On Projects

Guide to Networking Essentials, Eighth Edition 9-2

Lecture Notes

Overview

Chapter 9 will teach students how to develop a network security policy. They also learn

how to secure physical access to network equipment and how to secure network data.

Finally, at the end of the chapter, students will learn how to use tools to find network

security weaknesses.

Objectives

• Develop a network security policy

• Secure physical access to network equipment

• Secure network data

• Describe network security devices

• Protect a network from malware

• Use attackers’ tools to find network security weaknesses

Teaching Tips

Network Security Overview and Policies

Developing a Network Security Policy

1. Discuss how to make unobtrusive security into a good network security policy that

users can understand, obey, and yet still manage to get work done. Highlight the

guidelines listed on page 433 of the text.

Teaching

Tip

To learn more about security policies, refer to this article from Infosec:

https://resources.infosecinstitute.com/network-security-policy-part-3/#gref

Determining Elements of a Network Security Policy

1. Outline the elements of a security policy. Discuss the information that should be

covered by each of the following policies:

Guide to Networking Essentials, Eighth Edition 9-3

• Privacy policy

• Acceptable use policy

• Authentication policy

Understanding Levels of Security

1. Review the questions that students should ask when attempting to secure a network,

2. Next, discuss some different levels of security:

a. Highly restrictive security policies and what they entail

3. Discuss some of the more common elements in any security policy regarding

Securing Physical Access to the Network

1. Explain why physical security is important when trying to maintain a secure network.

Physical Security Best Practices

1. Review the list that serves as an overview of best practices to secure a network from

physical assault. Be sure to point out the following:

2. Cover some of the more basic requirements of a server room, and how the room should

be secured, as well as the devices inside the room.

3. Discuss the importance of securing internetworking devices. Be sure to point out the

following:

Guide to Networking Essentials, Eighth Edition 9-4

a. Additional care should be given to any configuration files that may have secure

passwords on them.

Teaching

Tip

Visit https://www.sans.org/reading-room/whitepapers/physical/physical-security-

important-37120 for a whitepaper involving physical security.

Quick Quiz 1

1. Which element of a Network Security Policy explains proper or improper use of the

Internet?

2. Which element of a Network Security Policy outlines the policies for backup

procedures, protection, and disaster recovery?

a. Privacy policy

b. Data Protection policy

c. Acceptable use policy

d. Access policy

3. What are the three levels of security?

4. True or False: Server rooms should be equipped with power that’s preferably on a

circuit separate from other electrical devices.

5. Which policy explains the manner in which security compliance or violations can be

verified and what consequences a violation should have?

a. Acceptable use policy

b. Privacy policy

c. Auditing policy

d. Data protection policy

Securing Access to Network Data

1. Briefly summarize the different means by which data on a network can be secured.

Guide to Networking Essentials, Eighth Edition 9-5

Setting Up Authentication and Authorization

1. Students should understand the difference between authentication and authorization.

2. Discuss the following authentication protocols:

• Kerberos

CHAPv2)

3. Introduce students to multifactor authentication (MFA), which requires a user to supply

two or more types of authentication drawn from these credential categories:

4. Discuss the options available for setting password requirements under Windows. Use

Figure 9-1 to review password policy settings in Windows 10.

6. Demonstrate the ability to enforce logon hours and logon locations for Windows users.

7. Explore some of the ways authorized access to files and folders can be implemented.

For Windows, discuss share permissions and file system permissions.

Teaching

Tip

Linux permissions can be just as confusing as Windows extended permissions,

despite their apparent simplicity. Direct students to https://www.guru99.com/file-

permissions.html to view a tutorial that covers Linux permissions.

Securing Data with Encryption

1. Discuss some key points about encryption as a brief summary.

Guide to Networking Essentials, Eighth Edition 9-6

2. Explain some basics of encryption and IPSec, such as what a preshared key is, or what

3. List some of the options available for securing data on disk drives, such as the

Encrypting File System on Windows. Point out that EFS works in one of the following

three modes:

a. Transparent mode

4. You should also mention Bitlocker as a full disk encryption solution, and detail the

Securing Communication with Virtual Private Networks

1. Explore the uses of a virtual private network in connecting remote users to remote

networks.

2. Describe the three implementations of VPN that Windows server OSs support:

3. Discuss the two VPN remote access modes available on most VPN servers:

4. Summarize some of the benefits of using a VPN:

a. Mobility

Securing Wireless Networks

1. Introduce this section by discussing the vulnerabilities administrators face with wireless

2. Discuss the following wireless security methods, one of which, should be enabled on all

networking devices:

• Wireless encryption

o Wi-Fi Protected Access 3 (WPA3)

Guide to Networking Essentials, Eighth Edition 9-7

2. Discuss the differences between a network-based IDS (NIDS) and a host-based IDS

(HIDS). Introduce the terms demilitarized zone and honeypot in your discussion.

Protecting a Network from Malware

1. Explain to students that malware is any type of software that presents a nuisance to

Viruses

2. Discuss the following virus types:

• File infector virus

Worms

1. Define a worm as a type of malware that doesn’t require another file to spread to other

2. Explain that a backdoor is a program installed on a computer that permits access to the

Other Forms of Malware

1. Discuss the following other forms of malware:

• Trojan horse

Spyware and Spam

1. Spam and spyware, although different, affect users in much the same way. Discuss with

students the differences between these two threats.

2. Educate students on the use of good anti-virus software, and provide some examples of

Malware Protection

1. Discuss how the risks above can be spread through networks, and cover how networks

can be protected by these threats.

Using an Attacker’s Tools to Stop Network Attacks

1. Discuss with students the practice of penetration testing networks, and using the same

Discovering Network Resources

1. Explain that before attackers can gain access to your network they must get information

about the network configuration. Discuss some of the tools that can be used:

Gaining Access to Network Resources

1. Discuss some of the ways an attacker can gain access to network resources once they

Disabling Network Resources

1. Explain how attackers can attempt to tie up network bandwidth by launching a denial-

2. Discuss the three common types of DoS attacks:

• Packet storms

Guide to Networking Essentials, Eighth Edition 9-11

Additional Projects

1. Have students research some of the more common security attacks. You could have

Additional Resources

1. Secure Architecture Design

3. The Future of Authentication: Biometric ID

4. Linux Security Tips

5. Penetration testing tools

Key Terms

For explanations of key terms, see the Glossary for this text.

➢ hoax virus

➢ honeypot

➢ intrusion detection system (IDS)

➢ intrusion prevention system (IPS)

Guide to Networking Essentials, Eighth Edition 9-12

➢ port scanner

➢ preshared key

➢ protocol analyzers

➢ ransomware

➢ rootkit

➢ virus signature

➢ VPN concentrator

➢ wardrivers

➢ Wi-Fi Protected Access (WPA)

➢ Wi-Fi Protected Access 2 (WPA2)

➢ Wi-Fi Protected Access 3 (WPA3)

➢ Wired Equivalent Privacy (WEP)

➢ worm

Technical Notes for Hands-On Projects