Network Security: Protecting the Integrity and Usability of Networking Services and Data

This presentation provides an overview of network security, including the importance of protecting networking services and data. It discusses external and internal attacks, preventive, detective, and corrective controls, and key approaches for cyber security. The presentation is relevant for anyone interested in understanding and implementing network security measures.

NETWORK SECURITY

Table of Content
 INTRODUCTION
 Overview of security needs of OUM
 External network attacks
 Types of External Attacks
 Internal Attacks
 Types of Internal Attack
 Control Against Network
 Preventive method for Cyber Attack
 Detective Control
 Corrective Control
 Key Approaches for Cyber Security
 CONCLUSION
 REFERENCES

INTRODUCTION
 Network security is defined as the approach used to protect the integrity and
usability of the networking services and data. Cyber attack is one of the most
alarming threat to the network security and thus it is very essential to adopt
suitable measures for providing network security.

Overview of security needs of OUM
 The biggest networking threat for the OUM is data breach and
malicious threats. The existing threats make the network system of university
highly vulnerable for the unauthorised access and data breach.

External network attacks
 The malicious campaign and threat actions that are conducted form
the outside of the organization and attack the surface that exist outside the
firewall.

Types of External Attacks
There are different type of techniques are used by Attack
hackers and external people from the organization to cause damage
to the data and information (Franck, 2016). That possess by the
organization. Mainly these techniques are- Malware, Phishing and
cross site scripting.
 Malware
 Phishing Attack
 Cross site scripting

Malware
 Malware and malicious software are known as programs and files that
are dangerous to computer. Computer viruses, worms, trojan horses and
spyware are considered as malware.

Phishing Attack
This type of cyber attack are common these days. Phishing is a process
that is used by hackers to infect computer system of user
.

Cross site scripting
Cross site scripting is a application layer web attack. It is a XSS
vulnerabilities target script that id embedded in the page which is executed on the
consumer end not on server side.

Internal Attacks
 Internal attacks can be considered as the attacks which occurred when
individual groups in organization tries to disrupt operations of organization
and harm organizational assets.

Types of Internal Attack
 Internal attack consists of different kind of actions that are
performed by people who are present inside the organization.
Through different ways insiders can infect or manipulate the
network of OUM which are- Malicious Cyber Attack, misuse of
gadget, fraud and weak pass word. These are the most common
type of internal attacks.
 Malicious Cyber Attacks
 Misuse of Gadgets
 Weak Passwords

Malicious Cyber Attacks
 Employees and members of organization have access to the network
and data. They have higher chances to modify and steal the confidential data
of OUM. Employees can miss use their authority and capacity to open back
door for hackers and unauthorised people to access, use and manipulate
network of university for their personal benefits.

Misuse of Gadgets
Misuse of company gadget is common in the offices and it can damage
the system of organization as well. Hen employees of organization to access the
inappropriate sites that contains malicious software or opening back door to the
hackers who can misuse the network of organization for criminal offence and
financial fraud. For example there are different gadgets and tools are provided to
perform their work in university and if they use this gadgets with bad intentions
then it can cause major damage to network, information and image of OUM.

Weak Passwords
People in the organization are careless about the passwords and they
keep a common password for all websites which is not good for organization and
employees both.

Control Against Network
Cyber attacks are common now days and it is really important for
organization to take preventive control to keep organization running
without any data and information loss and for this they need to
minimise these attacks through different methods.
 The Rising Cost of breaches
 Increasingly Sophisticated Hackers
 Importance of Data security

The Rising Cost of breaches
Few years age the security breaches were normal and conducted by
hackers on the normal level but now days this attacks are getting bigger and
costlier. This attacks are more common and professional now.

Increasingly Sophisticated Hackers
In the history, cyber attacks were just a way to cause damage the data
base of people and annoy the people and organizations but in current time these
attacks and attackers are growing more professional.

Importance of Data security
 Open University of Malaysia contains huge data base of
students and their employees. It is important and essential for
OUM to take proper security measures to improve the security of
their data base to prevent any problem later.
This is how the cyber attack can cause major damage to the OUM and
people associated with organization. To prevent such damage it is important for
university to consider different security measures and this will help the
organization to maintain data security in the future.

Preventive method for Cyber Attack
 This is a way to prevent different cyber attack for organization. Use
of external firewall is one of the best way prevent cyber attack on the
organizational.

Detective Control
 In this process or method organization can use different tools or
devices that can help them to detect different cyber attacks and intrusion on
the organization network.

Corrective Control
As cyber attack occurs on the organization server it is important for
organization to resolve this failure as fast as possible.

Key Approaches for Cyber Security
 Cyber security is major consideration for al type of organization. There are
various measures organization can use to prevent attacks and improve the security of
servers. Ways that organization can use to improve security are.
 Consider Biometric security
 This is one of the easiest way to prevent the cyber attack on organization
internally. Biometric security is currently used by many organizations to provide access
to specific people of OUM. Employees with in organization will be provided with the
access to the company server and this will prevent other people for using and handling
data and network.

CONCLUSION
This report is concluding importance of different cyber measurement for
OUM to keep their data bases and record safe and private, To prevent these
actions it is important for organization to identify various kind of cyber attacks to
consider proper methods to control and eliminate this attacks.

REFERENCS
 AbdAllah, E.G., Hassanein, H.S. and Zulkernine, M., 2015. A survey of security attacks in information-
centric networking. IEEE Communications Surveys & Tutorials. 17(3). pp.1441-1454.
 Franck, F., Alcatel Lucent SAS, 2016. Content-centric networking. U.S. Patent 9,338. 150.
 Ghali, C., Tsudik, G. and Wood, C.A., 2017, September. When encryption is not enough: privacy attacks in
content-centric networking. In Proceedings of the 4th ACM Conference on Information-Centric Networking
(pp. 1-10). ACM.
 Kalkan, K. and Zeadally, S., 2017. Securing internet of things with software defined networking. IEEE
Communications Magazine. 56(9). pp.186-192.
 Karami, A. and Guerrero-Zapata, M., 2015. A hybrid multiobjective rbf-pso method for mitigating dos
attacks in named data networking. Neurocomputing. 151. pp.1262-1282.
 Kaur, K., Kaur, S. and Gupta, V., 2016, March. Software defined networking based routing firewall. In 2016
International Conference on Computational Techniques in Information and Communication Technologies
(ICCTICT) (pp. 267-269). IEEE.
 Parker, B.J., Verizon Patent and Licensing Inc, 2017. Software-defined networking gateway. U.S. Patent
9,680,870.
 Yan, Q. and Yu, F.R., 2015. Distributed denial of service attacks in software-defined networking with cloud
computing. IEEE Communications Magazine. 53(4). pp.52-59.
 Yan, Z., Zhang, P. and Vasilakos, A.V., 2016. A security and trust framework for virtualized networks and
software‐defined networking. Security and communication networks. 9(16). pp.3059-3069.

THANK YOU