Editing Network Security (section)

== <span style="color: #FFFFFF;">Understanding</span> ==
Network security is understood through '''Defense in Depth''' and '''The CIA Triad'''.

'''1. The CIA Triad''':
* '''Confidentiality''': Only the right people can see the data (Encryption).
* '''Integrity''': The data hasn't been changed (Hashing).
* '''Availability''': The network is always working when needed (DDoS protection).

'''2. Defense in Depth (The Layers of the Castle)''':
One "Wall" is never enough. Good security uses multiple layers:
* '''The Perimeter''': Firewalls and Routers.
* '''The Network''': IDS and Traffic monitoring.
* '''The Host''': Antivirus and User permissions.
* '''The Application''': Secure code and Passwords.
* '''The Data''': Encryption.
If a hacker breaks through one layer, they should be stopped by the next.

'''3. The Zero Trust Model''':
In the past, we believed the "Internal Network" was safe and only the "Internet" was dangerous. Today, we assume '''The Network is already compromised'''. Every single request, even from a CEO's laptop inside the office, must be verified with a password, a device check, and multi-factor authentication (MFA).

'''The Principle of Least Privilege''': Never give a user or a program more access than they absolutely need to do their job. If a marketing intern doesn't need access to the payroll database, they shouldn't have it. This limits the damage if their account is hacked.
</div>

<div style="background-color: #8B0000; color: #FFFFFF; padding: 20px; border-radius: 8px; margin-bottom: 15px;">