Paper 8
NETWORK SECURITY
This unit covers the competencies required to implement network security. It involves identifying foundational features of network security, establishing a network framework, deploying network security tools and techniques and testing network vulnerability.
On completion, a candidate should be able to
- Identify foundational features of network security
- Establish a network security framework
- Deploy network security tools and techniques
- Test network vulnerability
Content
- 1
Identify foundational features of network security
Identify foundational features of network security
Definition of key terms ✓ Security ✓ Vulnerability ✓ Attack
Importance of network security
Types of network security ✓ Access control ✓ Antivirus ✓ Application security ✓ Behavioural analytics ✓ Data loss prevention ✓ Firewall ✓ Web security ✓ Network segmentation
Types of network vulnerabilities ✓ Malware ✓ Social engineering attacks
- 2
Establish a network security framework
Establish a network security framework
Definition of terms ✓ Infrastructure ✓ Policy ✓ Security policy
Network risk analysis ✓ Vulnerability Scan ✓ Penetration test ✓ Risk analysis
Network security structure ✓ Security policy management ✓ Network intrusion management ✓ Security operation ✓ Identity and access management
Network security framework
Network security policy
- 3
Deploy network security solutions
Deploy network security solutions
Network security tools
Network security techniques
Physical control measures ✓ Access controls ✓ Exterior lights ✓ Surveillance ✓ Perimeter wall
Logical security control measures ✓ Security policy
Password policy
Change management policy
Media disposal policy
Data retention policy ✓ Antivirus ✓ Firewall ✓ Virtual private network ✓ Employee training Encryption
- 4
Test network vulnerability
Test network vulnerability
Network testing plan ✓ Define objectives. ✓ Acceptable criteria ✓ Procedure ✓ Responsibilities ✓ Schedule
Levels of network vulnerability ✓ Internal ✓ External
Network Security ✓ Internal threats and external threats ✓ Social engineering techniques ✓ Cryptography using openPGP tool ✓ Configuring network security ✓ Support for Smart Grid
Network security penetration testing ✓ Planning and reconnaissance ✓ Scanning ✓ Gaining Access ✓ Maintaining access ✓ Analysis