Networking Basics for Security Professionals
How networks create attack surface
Core idea
A network connects assets, but every connection also creates a possible path for attack. Security work often starts by identifying where packets can enter, leave, or be redirected.
Common network layers and security concerns
| Layer | Security concern |
|---|---|
| Physical | Cable taps, rogue devices, power loss |
| Network | Routing abuse, scanning, spoofing |
| Transport | Session hijacking, port exposure |
| Application | Injection, weak authentication, insecure APIs |
Key concepts
Networking terms
Practical insight
If you can map what should talk to what, you can often find misconfigurations that attackers exploit.
How to reason about network exposure
-
1
List the assets and services that must be reachable.
-
2
Identify which ports and protocols are required.
-
3
Remove or restrict everything else.
-
4
Place monitoring on boundaries and high-value paths.
What does DNS primarily do?
DNS resolves human-readable names to IP addresses.
Correct answer: Translate names into IP addresses
Why is a firewall useful in a segmented network?
A firewall can reduce exposure by allowing only approved connections.
Correct answer: It enforces traffic rules between network zones
Which setting most directly reduces the attack surface of a server?
Unused services and ports should be disabled or blocked when possible.
Correct answer: Disable unused services