Welcome to Securing Data on a Network!
In our previous chapters, we looked at how networks like LANs and the internet allow us to share information instantly. But there is a catch: if data can move easily, it can also be stolen or damaged easily. In this chapter, we are going to learn about the "digital padlocks" and "security guards" we use to keep our information safe. Whether you are sending a private message or a bank is processing millions of dollars, security is the top priority!
1. Log-ins and Passwords
This is the most common way to secure a network. It is the first line of defense. A log-in (or username) identifies who you are, and a password proves it is really you.
How it works: The network compares what you type into a database of authorized users. If it matches, you're in!
Top Tip: A "strong" password usually includes a mix of capital letters, numbers, and symbols. Avoiding obvious things like your birthday makes it much harder for hackers to guess.
2. Firewalls: The Digital Bouncer
Imagine a popular club with a bouncer at the door. The bouncer checks everyone coming in and going out to make sure they are allowed to be there. A firewall does exactly this for a network.
Key Function: A firewall monitors "traffic" (data moving in and out). It follows a set of rules to decide whether to let data through or block it. It helps prevent hackers or malware from entering your computer from the internet.
Key Takeaway: Firewalls act as a barrier between a trusted internal network and an untrusted external network (like the internet).
3. Keeping Wireless Connections Safe: WEP and WPA
Wireless signals travel through the air, which means anyone nearby could technically "sniff" the data. To stop this, we use encryption on our Wi-Fi.
WEP (Wired Equivalent Privacy): This is an older security standard. It is now considered weak because it is easy for modern hackers to crack.
WPA (Wi-Fi Protected Access): This is the more modern and much stronger version. You will often see WPA2 or WPA3 on your home router. It provides much better protection for your data as it travels through the air.
Quick Review: Always choose WPA over WEP if you have the choice!
4. Encryption: The Secret Code
Encryption is the process of scrambling data into a secret code so that it cannot be read by anyone who doesn't have the "key."
Why use it? Even if a hacker manages to steal your data, they won't be able to understand it. It will just look like a jumble of random characters. This is vital for online shopping and banking.
Example: If you send the word "HELLO," encryption might turn it into "XJ92L." Only the receiver with the correct key can turn "XJ92L" back into "HELLO."
5. VPN (Virtual Private Network)
A VPN creates a secure, encrypted "tunnel" between your device and the network you are connecting to.
Why use a VPN? It is especially useful when using public Wi-Fi (like in a coffee shop). It hides your data from other people on the same public network and makes it look like you are connecting from a different location. Businesses often use VPNs so employees can safely access office files from home.
6. File Access Rights
Not everyone in a company needs to see every file. File access rights (sometimes called permissions) allow a network administrator to control what users can do with specific files or folders.
The three main levels of access are:
Read: You can look at the file but not change it.
Write/Edit: You can look at and make changes to the file.
Full Control: You can read, edit, and even delete the file.
Analogy: A student might have "Read" access to their school report, but only the teacher has "Write" access to change the grades!
7. Transaction Logs
A transaction log is like a digital diary. The network automatically records every action taken by users.
What is recorded? It shows who logged in, what time they logged in, what files they opened, and if they changed anything.
Why is it useful? If data is deleted or changed by mistake (or on purpose), the administrator can look at the log to see exactly who did it and when.
8. Backups: The Safety Net
Even with the best security, things can go wrong. Hardware can break, or a virus could delete your work. A backup is a copy of your data stored in a separate location.
Important Rule: A backup must be stored somewhere else (like an external hard drive or in the cloud). If you keep the copy on the same computer and that computer is stolen, you lose both!
Capacity Reminder: When backing up large networks, we deal with huge amounts of data. Remember the conversion: \( 1KiB = 1024 bytes \). Large backups are usually measured in Gibibytes (GiB) or Tebibytes (TiB).
9. Selecting the Right Method
In your exam, you might be asked to pick the best security method for a specific situation. Here is a quick guide:
Context: Protecting a home Wi-Fi network.
Solution: Use WPA2/WPA3 encryption and a strong password.
Context: A bank wants to ensure only certain staff can see customer balances.
Solution: Use File Access Rights to restrict permission.
Context: An employee needs to access sensitive work files while sitting in a cafe.
Solution: Use a VPN to create a secure tunnel.
Context: Making sure data can't be read if it is intercepted during a transaction.
Solution: Use Encryption.
Common Mistakes to Avoid
Don't mix up Firewalls and Anti-virus! A firewall blocks unauthorized access (the "bouncer"), while anti-virus software finds and removes malicious programs already on the system.
Backups are not just for hackers! Many students think backups are only for security. Remember, they also protect against accidental deletion or hardware failure.
WEP is not strong! If a question asks for a "secure" wireless standard, never suggest WEP; it is outdated.
Quick Summary Checklist
1. Passwords/Log-ins: Verify user identity.
2. Firewalls: Filter incoming/outgoing traffic.
3. WEP/WPA: Secure wireless data.
4. Encryption: Scramble data into code.
5. VPN: Create a secure tunnel over the internet.
6. Access Rights: Control who can view/edit/delete files.
7. Transaction Logs: Keep a record of all activity.
8. Backups: Create a secondary copy of data for recovery.