› Module 8: Network Security Fundamentals › 8.1 Security Goals — The CIA Triad
M O D U L E

Module 8: Network Security Fundamentals

The CIA Triad, symmetric vs asymmetric encryption, digital signatures, firewalls, and VPN tunnels

8.1 Security Goals — The CIA Triad

The foundation of all network information security is structured around the three core objectives of the CIA Triad.

Figure 8.1: The CIA Triad: The Three Pillars of Network Security CIA C Confidentiality Encryption & Access Controls I Integrity Hashing (SHA) & Checksums A Availability Redundancy & DDoS defense

Figure 8.1: The CIA Triad: Confidentiality (only authorized eyes), Integrity (tamper-proof), and Availability (uninterrupted uptime).

8.2 Encryption Techniques (Symmetric vs Asymmetric)

Cryptography converts plain readable text into unreadable ciphertext to guarantee confidentiality across open networks.

Figure 8.2: Symmetric (Shared Secret) vs Asymmetric (Public/Private Key) Encryption Symmetric Key Encryption Single Secret Key (K) • Same key used for both encrypt & decrypt • Extremely fast (bulk data encryption) • Challenge: Secure key distribution Examples: AES-256, DES, ChaCha20 Asymmetric (Public Key) Encryption Public Key Private Key • Public key encrypts; Private key decrypts • Eliminates shared secret distribution flaw • Computationally heavier (~1000x slower) Examples: RSA, ECC, Diffie-Hellman

Figure 8.2: Symmetric encryption uses one shared secret key; Asymmetric uses a mathematically linked public-private keypair.

8.3 Perimeter Defense: Firewalls and Virtual Private Networks (VPNs)

Enterprise perimeters are fortified using Firewalls to inspect traffic rules and Virtual Private Networks (VPNs) to tunnel encrypted packets across unsecure public networks.

Figure 8.3: Firewall Boundary Inspection & Encrypted VPN Tunneling Internal Secure Corporate LAN FIREWALL Stateful Packet Inspection Public Internet (Untrusted / Open) Remote User (Work from Home) IPsec / TLS Encrypted VPN Tunnel

Figure 8.3: A Firewall blocks unauthorized ports at the boundary, while a VPN creates an end-to-end encrypted tunnel across the public Internet.

MODULE COMPREHENSIVE QUIZ

Module 8 Final Quiz

Test your understanding across all 3 topics of this module with interview-grade questions, tricky edge cases, and code output predictions.

Take Module 8 Final Quiz →
Yukti Mascot