Network Security·Lesson 1 of 14
Network Security
The Short Answer
Network security is everything we do to protect a network and the data travelling across it from people who shouldn't have access. That means keeping private information secret, making sure no one tampers with it, and keeping the network up and running so the people who are allowed to use it always can. Any time a device connects to others, it becomes a possible target — and network security is the set of tools, rules, and habits that keep it safe.
The three goals — the CIA triad
Security professionals sum up the whole field with three goals, known as the CIA triad: Confidentiality (only the right people can read the data), Integrity (the data isn't secretly changed), and Availability (the network and services stay up for those who need them). Almost every attack breaks one of these three, and every defence protects one of them.
Securing a bank
Think of protecting a bank. You lock the vault so only authorised staff can open it (confidentiality). You keep exact records so no one can quietly alter an account balance (integrity). And you keep the doors open during business hours so real customers can actually get in (availability). Network security does the same three jobs, but for data and computers instead of cash and buildings.
What the CIA Triad Means
These three goals are worth pinning down clearly, because the rest of this topic is really just different ways of protecting them. Here's what each one means in plain terms:
Confidentiality
Keeping data secret so only authorised people can read it. Encryption is the main tool that provides this.
Integrity
Making sure data isn't altered in transit or storage. If a message is tampered with, we should be able to tell.
Availability
Keeping the network and its services running so legitimate users can reach them whenever they need to.
The Main Tools of Defence
No single gadget makes a network secure. Instead, security is built in layers — a principle called defence in depth, where several protections stack up so that if one fails, others still stand. Each tool below gets its own lesson later in this topic; here's the quick map of who does what:
Firewall
Checks traffic against a set of rules and blocks anything that isn't allowed, like a guard at the gate.
Encryption
Scrambles data so that even if someone captures it, they can't read it without the key.
Authentication
Verifies that people and devices are who they claim to be before letting them in.
VPN
Creates a private, encrypted tunnel across the public internet so traffic stays hidden from onlookers.
IDS / IPS
Watches traffic for signs of an attack, then raises an alert or blocks it automatically.
Proxy server
Sits between users and the internet, forwarding requests and adding a layer of control and privacy.
Attacks vs Defences
The easiest way to see the shape of network security is to line up the common threats against the goal each one attacks. Notice how every attack aims at confidentiality, integrity, or availability — the same three goals from the :
| Attack | What it does | Goal it breaks |
|---|---|---|
| Packet sniffing | Secretly reads traffic | Confidentiality |
| Man-in-the-middle | Intercepts and can alter traffic | Confidentiality & Integrity |
| Spoofing | Fakes a trusted identity | Integrity |
| DDoS | Floods a service so it goes down | Availability |
“"I have a firewall and antivirus, so my network is secure."”
Q:What is the CIA triad in network security?
A: It's the three core goals every security measure supports: Confidentiality (only authorised people can read the data), Integrity (the data can't be secretly altered), and Availability (legitimate users can always reach the service). Encryption mainly protects confidentiality, checks like hashes and signatures protect integrity, and defences against flooding attacks protect availability. Most attacks are best understood by which of these three they break.
Quick Revision Cheat Sheet
Network security: Protecting a network and its data from unauthorised access, change, or disruption
CIA triad: Confidentiality, Integrity, Availability — the three goals
Confidentiality: Only the right people can read the data (encryption)
Integrity: Data isn't secretly altered
Availability: Services stay up for legitimate users
Defence in depth: Layer many protections so one failure isn't fatal
Key tools: Firewall, encryption, authentication, VPN, IDS/IPS, proxy