10. Case Study: Securing a Small Network

Learning Objectives Identify at least three common vulnerabilities in a typical small office or home network. Propose a multi-layered security strategy using firewalls, strong passwords, and encryption. Explain the specific roles of a router, firewall, and antivirus software in network defense. Differentiate between the WPA3 security protocol and older, insecure protocols like WEP. Analyze a simple network diagram to spot potential security weaknesses. Outline the essential steps for securing a new wireless router out of the box. Ever used public Wi-Fi at a cafe and wondered if someone could see what you're doing? 🤔 Let's learn how to build a digital fortress for a network! In this case study, we will act as security consultants for a small, imaginary business. W...

TermDefinitionExample FirewallA network security system that acts as a barrier between a trusted internal network and an untrusted external network, like the Internet. It monitors and controls incoming and outgoing traffic based on a set of security rules.Your router's built-in firewall blocks a random computer on the internet from trying to connect to your laptop, preventing a potential hacking attempt. SSID (Service Set Identifier)The public name of a wireless network that is broadcasted by a router so that devices can find and connect to it.When you open your phone's Wi-Fi settings, the list of names like 'MyHomeWiFi' or 'Cafe_Guest' are all SSIDs. WPA3 (Wi-Fi Protected Access 3)The latest and most secure protocol for wireless networks. It provides stronge...

Principle of Least Privilege Grant users and systems only the minimum levels of access – or permissions – needed to perform their specific tasks. Use this principle when creating user accounts or network segments. For example, a guest Wi-Fi network should have access to the internet, but it should be blocked from accessing the main office's file server or printers. Default Deny Firewall Stance Configure a firewall to block all network traffic by default. Then, create specific rules to only allow traffic that is known to be necessary and safe. This is much more secure than a 'Default Allow' stance. You explicitly permit safe traffic (like web browsing on port 443) and everything else is automatically blocked, preventing unknown or malicious services from gettin...