Mediaspace scheduled maintenance: Aug 25, 2026 07:00 - 12:00 AM. During this time, videos will be temporarily unavailable. Check status updates.

Lecture

Network Security: Best Practices and Technologies

Description

This lecture covers network security best practices, including network segmentation, demilitarized zones, and virtual private networks. It also discusses the importance of firewalls, intrusion detection systems, and data protection through backups. The instructor emphasizes the need for a 'zero trust' approach and explains the role of proxies, web application firewalls, and anomaly-based intrusion detection systems.

Official source

Related concepts (32)

Virtual private network

A virtual private network (VPN) is a mechanism for creating a secure connection between a computing device and a computer network, or between two networks, using an insecure communication medium such as the public Internet. A VPN can extend a private network (one that disallows or restricts public access), in such a way that it enables users of that network to send and receive data across public networks as if the public networks' devices were directly connected to the private network.

Firewall (computing)

In computing, a firewall is a network security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules. A firewall typically establishes a barrier between a trusted network and an untrusted network, such as the Internet. The term firewall originally referred to a wall intended to confine a fire within a line of adjacent buildings. Later uses refer to similar structures, such as the metal sheet separating the engine compartment of a vehicle or aircraft from the passenger compartment.

Intrusion detection system

An intrusion detection system (IDS; also intrusion prevention system or IPS) is a device or software application that monitors a network or systems for malicious activity or policy violations. Any intrusion activity or violation is typically reported either to an administrator or collected centrally using a security information and event management (SIEM) system. A SIEM system combines outputs from multiple sources and uses alarm filtering techniques to distinguish malicious activity from false alarms.

Internet security

Internet security is a branch of computer security. It encompasses the Internet, browser security, web site security, and network security as it applies to other applications or operating systems as a whole. Its objective is to establish rules and measures to use against attacks over the Internet. The Internet is an inherently insecure channel for information exchange, with high risk of intrusion or fraud, such as phishing, online viruses, trojans, ransomware and worms.

Proxy server

In computer networking, a proxy server is a server application that acts as an intermediary between a client requesting a resource and the server providing that resource. It improves privacy, security, and performance in the process. Instead of connecting directly to a server that can fulfill a request for a resource, such as a file or web page, the client directs the request to the proxy server, which evaluates the request and performs the required network transactions.

Related lectures (39)

Server Security: Threats and Defenses

Explores server security, types of attacks, consequences, and defenses, along with an introduction to blockchains.

Servers: Security and Privacy

Explores server security, privacy, attacks, blockchains, encryption, and defense strategies against cyber threats.

Data Protection Laws in Switzerland

Covers Swiss data protection laws, including the Federal Data Protection Act and the roles defined in the legislation.

Privacy: Threat Modeling and Differential Privacy

Explores the significance of privacy, risks of targeted advertising, and the concept of differential privacy.

Privacy Technologies and Data Protection