Revision as of 07:48, 6 July 2025

Network Security

Introduction

Network security encompasses a variety of measures designed to protect the integrity, confidentiality, and availability of computer networks and the data that they transmit. As the prevalence of cyber threats has escalated, the importance of network security has intensified, leading to the development of newer protocols and technologies. The primary goal of network security is to establish a safe, guarded environment for users and devices, making it an essential component of information technology management in both public and private sectors.

History

The concept of network security is not a recent development; its origins can be traced back to the emergence of computer networking in the late 20th century. In the early days of network computing, security was often an afterthought, as most networks were used by trusted individuals. However, the dynamics changed dramatically in the 1990s with the rise of the internet. Malicious attacks began to flourish alongside legitimate online activity, prompting a new era of network security practices.

In 1970, the United States Department of Defense developed the ARPANET, which laid the groundwork for future networking technologies. Concurrently, significant research on encryption and secure communications was being conducted. The introduction of the Secure Sockets Layer (SSL) protocol in the mid-1990s provided a means for secure online transactions, marking a pivotal moment in network security.

By the turn of the 21st century, numerous high-profile security breaches brought to light vulnerabilities within existing systems, leading to stricter regulatory standards such as the Health Insurance Portability and Accountability Act (HIPAA) and the Sarbanes-Oxley Act (SOX). The evolution of network security has continued, further driven by increasing globalization and technological advancements, which have introduced unprecedented challenges and opportunities.

Design and Architecture

Network security architecture is the conceptual design and implementation framework for securing networks. It involves various layered techniques and methodologies aimed at tailoring security to specific environments and requirements.

Layers of Network Security

Network security can be applied across multiple layers, which include:

Physical Layer: This foundational layer involves securing the physical devices and infrastructure within the network. It includes monitoring and protecting server rooms, using surveillance cameras, and employing physical access controls such as locks and biometric scanners.

Data Link Layer: At this level, network protocols such as Ethernet and Wi-Fi require robust security measures. Techniques such as Media Access Control (MAC) filtering and VLAN segmentation can help mitigate risks at the data link layer.

Network Layer: Implementing firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) is crucial within this layer. These tools help to manage traffic flow and detect unauthorized access attempts.

Transport Layer: Ensuring secure communication between applications is critical here. Secure protocols such as Transport Layer Security (TLS) are employed to protect data in transit.

Application Layer: This layer requires the protection of the applications themselves. Security measures include web application firewalls (WAF), secure coding practices, and routine vulnerability assessments.

Security Policies and Best Practices

An organization's network security architecture must be reinforced with actionable policies. These policies should cover:

User access control – defining user roles and permissions.
Data encryption techniques – using strong protocols to safeguard sensitive information.
Incident response plan – outlining steps to take in the event of a security breach.
Regular security audits – assessing the effectiveness of implemented security measures.

Usage and Implementation

The implementation of network security involves a strategic approach that includes selecting appropriate tools and adopting best practices across an organization.

Security Tools and Technologies

Numerous tools and technologies are utilized to enhance network security, including:

Firewalls: These serve as a barrier between trusted internal networks and untrusted external networks. They can be hardware-based, software-based, or a combination of both.

Intrusion Detection and Prevention Systems (IDPS): IDPS monitor and analyze network traffic for signs of unauthorized access or anomalies. They can automatically respond to detected threats.

Virtual Private Networks (VPNs): VPNs encrypt internet traffic, allowing users to securely connect to remote networks and access corporate resources without risking data exposure.

Endpoint Security Solutions: These tools protect individual devices within the network from threats. This includes anti-virus software, endpoint detection and response (EDR), and mobile device management (MDM).

Best Practices for Implementation

Effective implementation should integrate a culture of security awareness among employees. Essential practices include:

Employee training programs – educating staff on recognizing phishing attacks and using secure passwords.
Regular updates and patch management – ensuring that software and systems are consistently updated to protect against known vulnerabilities.
Implementing multi-factor authentication (MFA) – adding an extra layer of security that goes beyond mere passwords.

Real-world Examples

Analyzing real-world incidents helps to illustrate the importance of robust network security measures. Several high-profile security breaches have underscored vulnerabilities inherent within network infrastructures.

Notable Breaches

Target Data Breach (2013): Hackers gained access to Target's network, resulting in the theft of credit card information from over 40 million customers. The attack highlighted lapses in network security protocols, particularly relating to third-party vendors.

Equifax Data Breach (2017): In one of the largest data breaches in history, personal information of approximately 147 million Americans was compromised. The breach stemmed from the exploitation of a vulnerability that had not been patched.

SolarWinds Hack (2020): This sophisticated supply chain attack involved the insertion of malicious code into the SolarWinds Orion software platform, compromising an array of organizations, including several U.S. government agencies.

Comparison of Security Measures

Organizations have varied responses in their strategies to manage network security. A comparison can be made between the approaches taken by large corporations versus small to medium-sized enterprises (SMEs):

Large Corporations: Typically have more resources and can invest heavily in comprehensive security solutions, engage in extensive employee training, and comply with regulatory best practices.
Small to Medium-sized Enterprises (SMEs): Often operate with limited budgets which may lead to adopting basic security measures. However, some SMEs are increasingly outsourcing security needs to managed security service providers (MSSPs).

Criticism and Controversies

Despite advancements in network security, several criticisms and controversies persist within the domain:

Over-Reliance on Technology

Many organizations invest heavily in advanced security technologies while neglecting crucial aspects such as employee training and the cultivation of a security-aware culture. Critics argue that technology alone is insufficient to mitigate human error, often the weakest link in the security chain.

Privacy Concerns

The use of robust security measures often raises concerns regarding user privacy. For instance, the deployment of technologies such as deep packet inspection and extensive logging can lead to disputes over surveillance and personal data rights.

Regulatory Compliance Issues

Organizations frequently grapple with the complexities of regulatory compliance. Navigating various laws and requirements, such as the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), can be challenging and resource-intensive.

Cybersecurity Insurance Challenges

As the field of cybersecurity has grown, so has the market for cybersecurity insurance. However, discrepancies between what is covered and the realities of breaches have led to controversies surrounding policy payouts and responsibilities.

Influence and Impact

Network security has far-reaching implications that extend beyond individual organizations to societal and global contexts. Its impact can be analyzed through its influence on several sectors:

Economic Impact

Cybercrime costs businesses trillions of dollars annually. High-profile breaches often result in significant economic losses, legal ramifications, and damaged reputations. As organizations increasingly depend on digital services, the cost of cybersecurity failures is projected to continue rising.

Innovation and Development

The demand for effective network security solutions has spurred innovation in fields including artificial intelligence (AI), machine learning (ML), and blockchain technology. Companies are continually developing innovative products to address emerging threats.

Regulatory Changes

Network security incidents have often triggered regulatory changes that impact how organizations handle data and safeguard information. Legislative shifts emphasize security by design and enhancing consumer protections.

Global Cooperation

Fostering international cooperation has become crucial in combating cyber threats. Organizations like INTERPOL and the European Union Agency for Cybersecurity (ENISA) promote collaborations across borders to develop common strategies for cybersecurity.

References

@@ Line 1: / Line 1: @@
-== Network Security ==
+= Network Security =
-Network security is a comprehensive term that encompasses various technologies, devices, and processes designed to protect the integrity, confidentiality, and accessibility of computer networks and data. As cyber threats evolve and become more sophisticated, the need for robust network security measures becomes increasingly paramount. This article will explore the historical background, fundamental principles, implementations, and challenges associated with network security.
 == Introduction ==
+Network security encompasses a variety of measures designed to protect the integrity, confidentiality, and availability of computer networks and the data that they transmit. As the prevalence of cyber threats has escalated, the importance of network security has intensified, leading to the development of newer protocols and technologies. The primary goal of network security is to establish a safe, guarded environment for users and devices, making it an essential component of information technology management in both public and private sectors.
-Network security is a critical aspect of information technology that focuses on safeguarding computer networks and the data they carry from unauthorized access, misuse, modification, or denial of service. With the proliferation of internet-connected devices and an ever-increasing reliance on digital communication and data storage, the importance of network security has intensified. It encompasses a variety of measures and protocols designed to protect networked environments, from small home networks to large enterprise infrastructures.
+== History ==
+The concept of network security is not a recent development; its origins can be traced back to the emergence of computer networking in the late 20th century. In the early days of network computing, security was often an afterthought, as most networks were used by trusted individuals. However, the dynamics changed dramatically in the 1990s with the rise of the internet. Malicious attacks began to flourish alongside legitimate online activity, prompting a new era of network security practices.
-The vulnerabilities associated with unsecured networks can lead to significant consequences, including financial loss, theft of sensitive information, legal repercussions, and damage to reputation. As such, effective network security strategies are essential for organizations of all sizes, as well as individuals, to maintain the safety and reliability of their network environments.
-== History and Background ==
-Network security traces its roots back to the early days of computer networking. In the 1970s and 1980s, the development of the ARPANET, the precursor to the modern Internet, brought about initial discussions regarding data privacy and security. The need for secure communications became apparent with the integration of more complex computer systems and the emergence of cyber threats.
-As the Internet became widely accessible in the 1990s, the rise of cybercrime including viruses, worms, and hackers prompted a greater focus on security protocols. Early advancements included firewalls, the implementation of Virtual Private Networks (VPNs), and the introduction of encryption standards. The creation of standardized protocols, such as the Internet Protocol Security (IPsec) and the Secure Sockets Layer (SSL), set the foundation for more secure network communication.
-The turn of the millennium saw the advent of more sophisticated threats, including phishing attacks, denial-of-service (DoS) attacks, and various forms of malware. Organizations began to recognize the critical need for a proactive approach to network security, leading to the establishment of security frameworks and compliance standards such as the Payment Card Industry Data Security Standard (PCI DSS) and the Health Insurance Portability and Accountability Act (HIPAA) requirements.
+In 1970, the United States Department of Defense developed the ARPANET, which laid the groundwork for future networking technologies. Concurrently, significant research on encryption and secure communications was being conducted. The introduction of the Secure Sockets Layer (SSL) protocol in the mid-1990s provided a means for secure online transactions, marking a pivotal moment in network security.
-In recent years, the emergence of cloud computing and the Internet of Things (IoT) further transformed the landscape of network security. The need for security measures that could adapt to diverse environments has become more crucial than ever, leading to innovations in security technology and practices.
+By the turn of the 21st century, numerous high-profile security breaches brought to light vulnerabilities within existing systems, leading to stricter regulatory standards such as the Health Insurance Portability and Accountability Act (HIPAA) and the Sarbanes-Oxley Act (SOX). The evolution of network security has continued, further driven by increasing globalization and technological advancements, which have introduced unprecedented challenges and opportunities.
 == Design and Architecture ==
+Network security architecture is the conceptual design and implementation framework for securing networks. It involves various layered techniques and methodologies aimed at tailoring security to specific environments and requirements.
-The design and architecture of network security encompass various components that work cohesively to provide a secure network environment. The basic framework includes the following elements:
+=== Layers of Network Security ===
+Network security can be applied across multiple layers, which include:
-=== 1. Firewalls ===
-Firewalls serve as a fundamental barrier between trusted and untrusted networks. They can be hardware-based devices or software applications that monitor and control incoming and outgoing network traffic based on predetermined security rules. Firewalls help prevent unauthorized access to or from a private network and can also provide logging and reporting functionalities.
+# '''Physical Layer''': This foundational layer involves securing the physical devices and infrastructure within the network. It includes monitoring and protecting server rooms, using surveillance cameras, and employing physical access controls such as locks and biometric scanners.
-=== 2. Intrusion Detection and Prevention Systems (IDPS) ===
+# '''Data Link Layer''': At this level, network protocols such as Ethernet and Wi-Fi require robust security measures. Techniques such as Media Access Control (MAC) filtering and VLAN segmentation can help mitigate risks at the data link layer.
-Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS) are crucial components of network security architecture. IDS monitors network traffic for suspicious activity, generating alerts when potential threats are detected. IPS goes a step further by actively blocking malicious traffic and attempting to mitigate ongoing attacks.
+# '''Network Layer''': Implementing firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) is crucial within this layer. These tools help to manage traffic flow and detect unauthorized access attempts.
-=== 3. Virtual Private Networks (VPNs) ===
+# '''Transport Layer''': Ensuring secure communication between applications is critical here. Secure protocols such as Transport Layer Security (TLS) are employed to protect data in transit.
-VPNs create secure connections between devices over the internet, allowing users to send and receive data as if they were on a private network. Through the use of encryption protocols, VPNs protect data from interception, making them particularly valuable for remote workers and users accessing public Wi-Fi networks.
+# '''Application Layer''': This layer requires the protection of the applications themselves. Security measures include web application firewalls (WAF), secure coding practices, and routine vulnerability assessments.
-=== 4. Access Control Lists (ACLs) ===
+=== Security Policies and Best Practices ===
+An organization's network security architecture must be reinforced with actionable policies. These policies should cover:
-Access Control Lists define permissions for users or devices within a network. By specifying which entities can access what resources and under what conditions, ACLs play a vital role in minimizing unauthorized access and enforcing security policies.
+* User access control – defining user roles and permissions.
+* Data encryption techniques – using strong protocols to safeguard sensitive information.
-=== 5. Network Segmentation ===
+* Incident response plan – outlining steps to take in the event of a security breach.
+* Regular security audits – assessing the effectiveness of implemented security measures.
-Network segmentation involves dividing a computer network into smaller sub-networks, enhancing security and performance. By isolating critical systems and sensitive data, organizations can limit exposure to potential threats and better contain any breaches that may occur.
-=== 6. Security Information and Event Management (SIEM) ===
-SIEM systems aggregate and analyze security data from across the network in real time. They provide organizations with insights into potential security incidents, enabling faster detection and response to threats. SIEM tools facilitate compliance efforts through log management and reporting.
-=== 7. Encryption ===
-Encryption is the process of encoding data so that only authorized parties can access it. By converting plaintext into ciphertext, encryption protects sensitive information from unauthorized access during transmission and storage. Common encryption protocols include SSL/TLS for web traffic and the Advanced Encryption Standard (AES) for data at rest.
 == Usage and Implementation ==
+The implementation of network security involves a strategic approach that includes selecting appropriate tools and adopting best practices across an organization.
-Organizations employ a variety of strategies for implementing network security across their infrastructures. The following sections highlight key practices in the area of usage and implementation.
+=== Security Tools and Technologies ===
+Numerous tools and technologies are utilized to enhance network security, including:
-=== 1. Risk Assessment ===
+# '''Firewalls''': These serve as a barrier between trusted internal networks and untrusted external networks. They can be hardware-based, software-based, or a combination of both.
-Conducting a risk assessment is the first step toward implementing an effective network security plan. Organizations identify potential vulnerabilities and threats, assess the likelihood and impact of each risk, and prioritize security measures accordingly.
+# '''Intrusion Detection and Prevention Systems (IDPS)''': IDPS monitor and analyze network traffic for signs of unauthorized access or anomalies. They can automatically respond to detected threats.
-=== 2. Security Policies and Procedures ===
+# '''Virtual Private Networks (VPNs)''': VPNs encrypt internet traffic, allowing users to securely connect to remote networks and access corporate resources without risking data exposure.
-Establishing comprehensive security policies and procedures is essential for guiding employees and stakeholders on best practices. Policies should outline acceptable use, password management, incident response procedures, and network access requirements. Ongoing training and awareness programs help ensure that all individuals understand and adhere to these policies.
+# '''Endpoint Security Solutions''': These tools protect individual devices within the network from threats. This includes anti-virus software, endpoint detection and response (EDR), and mobile device management (MDM).
-=== 3. Regular Updates and Patch Management ===
+=== Best Practices for Implementation ===
+Effective implementation should integrate a culture of security awareness among employees. Essential practices include:
+* Employee training programs – educating staff on recognizing phishing attacks and using secure passwords.
+* Regular updates and patch management – ensuring that software and systems are consistently updated to protect against known vulnerabilities.
+* Implementing multi-factor authentication (MFA) – adding an extra layer of security that goes beyond mere passwords.
-Timely software updates and patch management are critical for maintaining the security of network devices and applications. Flaws or vulnerabilities in software can provide lucrative opportunities for cybercriminals; therefore, it is essential to promptly address these issues through regular updates.
+== Real-world Examples ==
+Analyzing real-world incidents helps to illustrate the importance of robust network security measures. Several high-profile security breaches have underscored vulnerabilities inherent within network infrastructures.
-=== 4. Network Monitoring ===
+=== Notable Breaches ===
+# '''Target Data Breach (2013)''': Hackers gained access to Target's network, resulting in the theft of credit card information from over 40 million customers. The attack highlighted lapses in network security protocols, particularly relating to third-party vendors.
-Continuous monitoring of network traffic allows organizations to detect anomalous behavior that may indicate a security breach. Utilizing IDPS and SIEM systems enhances monitoring capabilities, providing alerts for any irregularities in real-time.
+# '''Equifax Data Breach (2017)''': In one of the largest data breaches in history, personal information of approximately 147 million Americans was compromised. The breach stemmed from the exploitation of a vulnerability that had not been patched.
-=== 5. Incident Response Planning ===
+# '''SolarWinds Hack (2020)''': This sophisticated supply chain attack involved the insertion of malicious code into the SolarWinds Orion software platform, compromising an array of organizations, including several U.S. government agencies.
-An incident response plan outlines procedures for managing and responding to security incidents. It typically includes identification, containment, eradication, recovery, and lessons learned stages. Regular drills and updates to the plan help ensure that organizations are prepared to react swiftly in the event of a breach.
+=== Comparison of Security Measures ===
+Organizations have varied responses in their strategies to manage network security. A comparison can be made between the approaches taken by large corporations versus small to medium-sized enterprises (SMEs):
-=== 6. Compliance and Auditing ===
+* '''Large Corporations''': Typically have more resources and can invest heavily in comprehensive security solutions, engage in extensive employee training, and comply with regulatory best practices.
+* '''Small to Medium-sized Enterprises (SMEs)''': Often operate with limited budgets which may lead to adopting basic security measures. However, some SMEs are increasingly outsourcing security needs to managed security service providers (MSSPs).
-Adherence to industry standards and regulations is crucial for safeguarding sensitive data and maintaining customer trust. Organizations should institute regular audits to gauge compliance with established security policies and frameworks, identifying areas for improvement.
-=== 7. Threat Intelligence Sharing ===
-Collaboration and information sharing among organizations can strengthen overall network security. By participating in threat intelligence communities, organizations can stay informed about emerging threats and trends in cybercrime, improving their collective resilience against attacks.
-== Real-World Examples or Comparisons ==
-Real-world examples of network security implementations can shed light on the challenges and successes organizations face. Various case studies illustrate how businesses and government entities have navigated the complexities of securing their networks.
-=== 1. Target Data Breach (2013) ===
-The Target data breach, which exposed the personal information of over 40 million customers, underscores the importance of robust network security. Attackers gained access through compromised third-party vendor credentials. In the aftermath, Target invested heavily in upgrading its security practices, particularly in areas such as monitoring, threat detection, and employee training.
-=== 2. SolarWinds Cyberattack (2020) ===
-The SolarWinds cyberattack, which involved the infiltration of the company’s software supply chain, highlighted vulnerabilities inherent in complex multinational networks. The incident revealed the sophistication of modern cyber threats and the challenges faced by organizations in securing interconnected ecosystems. The attack prompted organizations worldwide to reevaluate their approach to security, including enhanced scrutiny of third-party vendors.
-=== 3. Equifax Data Breach (2017) ===
-The Equifax data breach, affecting approximately 147 million individuals, arose from the failure to address a known vulnerability in its systems. The breach emphasized the critical role of patch management and risk assessment in network security. As a result, Equifax faced substantial criticism, litigation, and a drastic overhaul of their security practices following the incident.
 == Criticism and Controversies ==
+Despite advancements in network security, several criticisms and controversies persist within the domain:
-Despite advancements in network security, various criticisms and controversies have emerged surrounding its implementation and effectiveness.
+=== Over-Reliance on Technology ===
+Many organizations invest heavily in advanced security technologies while neglecting crucial aspects such as employee training and the cultivation of a security-aware culture. Critics argue that technology alone is insufficient to mitigate human error, often the weakest link in the security chain.
-=== 1. User Privacy Concerns ===
-As organizations implement network security measures, balancing security with user privacy remains a significant challenge. Practices such as heightened monitoring, data collection, and surveillance can lead to concerns about the erosion of personal privacy rights. Critics argue that overreaching security policies can infringe upon civil liberties without providing proportional increases in safety.
-=== 2. Dependence on Technology ===
-Many security experts express concern regarding the reliance on technological solutions for network security. As systems become increasingly automated and reliant on artificial intelligence, there is growing apprehension about the potential for increased vulnerabilities, particularly if systems are compromised. The discourse around the consequences of AI-driven security solutions often raises questions about accountability and ethical implications.
+=== Privacy Concerns ===
+The use of robust security measures often raises concerns regarding user privacy. For instance, the deployment of technologies such as deep packet inspection and extensive logging can lead to disputes over surveillance and personal data rights.
-=== 3. Insider Threats ===
+=== Regulatory Compliance Issues ===
+Organizations frequently grapple with the complexities of regulatory compliance. Navigating various laws and requirements, such as the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), can be challenging and resource-intensive.
-Insider threats—malicious or negligent actions by individuals within an organization—pose a significant risk to network security. Critics argue that many standard security measures focus on external threats, potentially neglecting the need for comprehensive strategies designed to mitigate insider risks. Research suggests that organizations should employ behavioral analytics and anomaly detection to identify atypical user patterns, thereby identifying potential insider attacks early.
+=== Cybersecurity Insurance Challenges ===
+As the field of cybersecurity has grown, so has the market for cybersecurity insurance. However, discrepancies between what is covered and the realities of breaches have led to controversies surrounding policy payouts and responsibilities.
 == Influence and Impact ==
+Network security has far-reaching implications that extend beyond individual organizations to societal and global contexts. Its impact can be analyzed through its influence on several sectors:
-The evolution of network security has profoundly influenced various sectors, from business to government, healthcare, and education. The ramifications of cyberattacks extend beyond immediate loss; they have wider implications for trust, compliance, and regulatory measures.
+=== Economic Impact ===
+Cybercrime costs businesses trillions of dollars annually. High-profile breaches often result in significant economic losses, legal ramifications, and damaged reputations. As organizations increasingly depend on digital services, the cost of cybersecurity failures is projected to continue rising.
-=== 1. Business Resilience ===
-Effective network security measures bolster organizational resilience, allowing businesses to withstand and recover from cyber incidents. With thoroughly implemented network security frameworks, organizations minimize downtime, protect sensitive data, and maintain customer trust, ultimately promoting sustainable business operations.
+=== Innovation and Development ===
+The demand for effective network security solutions has spurred innovation in fields including artificial intelligence (AI), machine learning (ML), and blockchain technology. Companies are continually developing innovative products to address emerging threats.
-=== 2. Economic Impact ===
+=== Regulatory Changes ===
+Network security incidents have often triggered regulatory changes that impact how organizations handle data and safeguard information. Legislative shifts emphasize security by design and enhancing consumer protections.
-The economic repercussions of cybercrime are staggering, with losses amounting to billions annually. Enhanced network security practices contribute to the mitigation of financial losses associated with breaches, regulatory fines, and reputational damage. Investing in network security is not only a means of protection but also an economic imperative for organizations aiming to thrive in an increasingly digital landscape.
+=== Global Cooperation ===
+Fostering international cooperation has become crucial in combating cyber threats. Organizations like INTERPOL and the European Union Agency for Cybersecurity (ENISA) promote collaborations across borders to develop common strategies for cybersecurity.
-=== 3. Regulatory Landscape ===
-The rise in cyber threats has prompted governments to establish regulations and mandates for network security across various sectors. Compliance with standards such as GDPR (General Data Protection Regulation) or the New York Department of Financial Services Cybersecurity Regulation shapes organizational strategies toward data protection and cybersecurity.
-=== 4. Public Awareness ===
-The prominence of cyber threats in mainstream media has heightened public awareness of network security issues. Increased education and awareness campaigns are critical for ensuring individuals understand their role in maintaining security, from practicing good password hygiene to recognizing phishing attempts.
 == See Also ==
+* [[Information Security]]
 * [[Cybersecurity]]
-* [[Information Security]]
-* [[Data Breach]]
-* [[Firewall]]
 * [[Encryption]]
 * [[Intrusion Detection System]]
-* [[Malware]]
+* [[Firewall]]
-* [[Phishing]]
+* [[Virtual Private Network]]
 == References ==
-* [https://www.cisecurity.org/ Center for Internet Security]
+*[https://www.nist.gov/ National Institute of Standards and Technology]
-* [https://www.nist.gov/ National Institute of Standards and Technology]
+*[https://www.sans.org/ SANS Institute]
-* [https://www.ibm.com/security/data-breach IBM Cost of Data Breach Report]
+*[https://www.cisa.gov/ Cybersecurity and Infrastructure Security Agency]
-* [https://www.phishing.org/ Anti-Phishing Working Group]
+*[https://www.enisa.europa.eu/ European Union Agency for Cybersecurity]
-* [https://www.pcisecuritystandards.org/ Payment Card Industry Security Standards Council]
+*[https://www.securitymagazine.com/ Security Magazine]
-* [https://www.jstor.org/stable/10.5325/jitsyssec.7.2.0185 A Journal of Information Technology Systems]
-* [https://www.csoonline.com/article/3546742/the-evolving-threat-landscape-of-cybersecurity.html CSO Online: The Evolving Threat Landscape of Cybersecurity]
 [[Category:Network security]]
-[[Category:Cybersecurity]]
 [[Category:Computer security]]
+[[Category:Information security]]