JAWAHARLAL NEHRU TECHNOLOGICAL UNIVERSITY HYDERABAD MCA 2021 ETHICAL HACKING Previous Question Paper (February - 2021 - R17)

Network security refers to the policies, processes, and practices adopted to prevent, detect, and monitor unauthorized access, misuse, modification, or denial of a computer network and network-accessible resources. It involves the implementation of hardware and software technologies to protect the underlying networking infrastructure from unauthorized access and cyber threats.

Key components of network security include:

• Access Control: Ensuring only authorized users and devices can access network resources, typically through authentication mechanisms like passwords, biometrics, and multi-factor authentication.
• Firewalls: Acting as a barrier between a trusted internal network and untrusted external networks, filtering incoming and outgoing traffic based on defined security rules.
• Intrusion Detection and Prevention Systems (IDS/IPS): Monitoring network traffic for suspicious activity and taking action to block or prevent potential attacks.
• Virtual Private Networks (VPNs): Creating secure, encrypted tunnels for data transmission over public networks.
• Network Segmentation: Dividing a network into smaller sub-networks to limit the blast radius of a potential breach and improve performance.

Service security focuses on protecting individual applications, services, and the data they process, rather than the network infrastructure itself. It ensures that the specific functions provided by a server or application remain available, confidential, and integral to authorized users.

Key components of service security include:

• Application Hardening: Removing unnecessary features, disabling unused services, and patching vulnerabilities to reduce the attack surface of a specific service.
• Input Validation: Sanitizing data received by a service to prevent common attacks such as SQL injection, Cross-Site Scripting (XSS), and buffer overflows.
• Encryption: Protecting data at rest and in transit using protocols like TLS/SSL to ensure that even if intercepted, the information remains unreadable.
• Authentication and Authorization: Implementing granular controls to verify the identity of service consumers and ensuring they have the minimum necessary permissions (Principle of Least Privilege).
• Logging and Auditing: Maintaining detailed records of service access and transactions to facilitate incident response and forensic analysis.

While network security provides the perimeter defense, service security provides the defense-in-depth required to protect the actual assets and logic residing within the network environment.

Risk management is a structured, iterative process designed to identify, assess, and mitigate threats to an organization's information assets. It ensures that security controls are aligned with business objectives and that resources are allocated effectively to manage the most significant risks.

The process typically follows these key stages:

• Risk Assessment Preparation: Define the scope of the assessment, identify the assets to be protected, and establish the context, including legal, regulatory, and organizational requirements.
• Risk Identification: Systematically identify potential threats (e.g., cyberattacks, natural disasters, human error) and vulnerabilities within the infrastructure, software, and personnel that could be exploited.
• Risk Analysis: Evaluate the likelihood of a threat occurring and the potential impact on the organization. This is often calculated as
  Risk = Threat × Vulnerability × Asset Value
  .
• Risk Evaluation: Compare the calculated risk levels against the organization's risk appetite. Determine which risks are acceptable and which require immediate intervention.
• Risk Treatment: Select and implement strategies to manage risks. These strategies include:
  • Risk Mitigation: Implementing security controls to reduce the likelihood or impact.
  • Risk Transfer: Shifting the risk to a third party, such as through cyber insurance.
  • Risk Avoidance: Changing business processes to eliminate the risk entirely.
  • Risk Acceptance: Acknowledging the risk if the cost of mitigation exceeds the potential loss.
• Monitoring and Review: Continuously track the effectiveness of implemented controls. Since the threat landscape is dynamic, the risk management process must be reviewed periodically to address new vulnerabilities and evolving attack vectors.

Effective risk management requires ongoing communication and consultation with stakeholders to ensure that security measures support the organization's mission while maintaining compliance and operational resilience.