CST 311 - Intro to Computer Networks - Week 8

 

This week in CST-311, we learned about operational security in computer networks, specifically about the role of firewalls and intrusion detection systems (IDS) in protecting networks from external threats. Firewalls act as the first line of defense, filtering incoming and outgoing traffic based on predefined security rules, and ensuring that only authorized communications pass through. We learned about the different types of firewalls, including packet filtering, stateful inspection, and application layer firewalls, and how they can be configured to secure various network layers and services. Additionally, we learned about the concept of demilitarized zones (DMZs), where firewalls are used to segment public facing servers from the internal network, adding an extra layer of protection.

Besides firewalls, we also covered intrusion detection systems that monitor network traffic in real time to detect and respond to suspicious activities. IDS can be network based or host based, and they work by analyzing patterns in traffic or system behavior to identify potential threats. We learned how IDS can either passively alert administrators of potential security breaches or actively respond by blocking malicious traffic. Both firewalls and IDS are essential tools in maintaining the security and integrity of computer networks, making them key components of any comprehensive operational security strategy.