GITAM UNIVERSITY
From : Deekshith G N
Reg no : BU22CSEN0400260
Dept of CSE ( Cyber Security )
COURSE : Network Defense
Submitted To : Zameer Ahmed Adhoni
( Dept of AI and DS )
Batch : 2022-26
REPORT ON THE
COURSE NETWORK
DEFENCE
In today's digital landscape, securing networks has become a
critical priority. Network defense refers to the strategies,
technologies, and policies used to protect network infrastructure
from unauthorized access, cyber threats, and data breaches.
Effective network defense involves proactive monitoring,
intrusion prevention, firewall configurations, encryption
protocols, and access control mechanisms. By understanding
and deploying robust network defense strategies, organizations
can minimize security risks, enhance data confidentiality,
and ensure the integrity of their digital data
Understanding Defense
Introduction to Cyber Defense Defense-in-Depth Strategy
Cyber defense refers to the strategies and measures Defense-in-Depth (DiD) implements multiple layers
used to protect digital systems, networks, and data of defense mechanisms, including firewalls, intrusion
from unauthorized access. Organizations must adopt a detection systems (IDS), encryption, and
layered security approach to minimize risks. authentication controls to slow down and contain
attacks.
Importance of Security
Policies
1 Security Policies
Security policies define the rules, best practices, and
protocols for protecting organizational assets, covering
aspects like password management, data encryption,
and incident response procedures.
2 Cybersecurity Regulations
Governments and industry bodies enforce cybersecurity
regulations to protect sensitive data and maintain digital
trust, such as GDPR, HIPAA, and PCI DSS. Organizations
must comply to avoid legal penalties.
Threat Intelligence and
Security Awareness
Threat Intelligence
Threat intelligence involves gathering and analyzing
information about emerging cyber threats to proactively
defend against attacks. Organizations use it to stay ahead of
cybercriminals.
Security Awareness
Human error is a leading cause of breaches, making
employee training crucial. Programs educate about
phishing attacks and safe online behavior, enhancing
overall security resilience.
System and Network Defense
Physical Security Application Security
Protects hardware and network devices from physical Focuses on securing software and applications from
threats using security cameras, biometric access vulnerabilities with secure coding practices, patch
control, and restricted server rooms. management, and application firewalls.
Access Control
1 Types of Access Controls
Discretionary Access Control (DAC), Mandatory
Access Control (MAC), Role-Based Access
Control (RBAC), and Attribute-Based Access
Control (ABAC) regulate who can access resources.
2 Account Management
User accounts must be securely managed with
strong password policies, Multi-Factor
Authentication (MFA), and regular reviews to
prevent unauthorized access.
Secure Network Design
Network Security Principles
Defense in Depth, Zero Trust Model, and Least
Privilege guide secure network design to protect
infrastructure from cyber threats.
Network Segmentation
Divides networks into smaller segments using
VLANs, subnets, and firewalls to limit attack
surfaces.
Firewall Technologies
Types of Firewalls Firewall Rules
Packet Filtering, Stateful Security policies define which
1
Inspection, Proxy, and Next- traffic is allowed or blocked
Generation Firewalls 2 based on IP addresses, ports,
(NGFWs) control traffic based on protocols, and user
security policies. authentication.
Cryptography
Confidentiality
1 Encryption
Integrity
2 Data Verification
Authenticity
3 Digital Signatures
Cryptography secures data through encryption, hashing, and authentication, ensuring confidentiality,
integrity, authenticity, and non-repudiation. Use strong encryption standards and implement multi-factor
authentication (MFA).
Conclusion
Network defense is essential for protecting systems from cyber threats. This course covered key strategies like
access control, firewalls, cryptography, and alert management.
To stay ahead of evolving threats, organizations must adopt proactive security, continuous monitoring, and
automation. Strong policies and threat intelligence help build a resilient security posture in today's digital
world.
