1.4 Network Security

In this module, you will learn about the threats that can affect computer systems, networks, and data, and the security measures used to reduce these risks. You will begin by exploring common cyber threats, including malware, social engineering, brute-force attacks, denial of service attacks, data interception and theft, and SQL injection.

You will examine how different attacks work and the effects they can have, including unauthorised access, data theft, financial loss, damaged or encrypted files, and disruption to services. You will also explore different forms of malware, social engineering techniques such as phishing and pretexting, distributed denial of service attacks, packet sniffing, and man-in-the-middle attacks.

Next, you will learn how vulnerabilities can be identified and reduced using methods such as penetration testing, anti-malware software, firewalls, user access levels, strong passwords, two-factor authentication, encryption, input validation, input sanitisation, and physical security.

Finally, you will explore how several security measures can be used together to provide stronger protection. This approach, known as defence in depth, reduces the likelihood that a single weakness or failed security control will result in a successful attack.