Network Security Basics

Why networks need defending

Every message, photo and password you send crosses networks you do not control — your router, your provider, and many systems in between. Network security is the set of tools and habits that keep that travelling data private, unchanged, and available only to the right people.

The core building blocks

• Firewall — a gatekeeper that allows or blocks traffic by rules; your router and operating system both have one — keep them on
• Encryption — scrambles data so only the intended receiver can read it; HTTPS on websites and modern Wi-Fi (WPA2/WPA3) both rely on it
• VPN — an encrypted tunnel through an untrusted network; useful on public Wi-Fi, though it shifts trust to the VPN provider rather than removing risk
• Authentication — proving who may join: strong Wi-Fi passwords and 2FA on accounts
• Updates — routers and devices get security fixes too; an unpatched router guards nothing

Attack ideas you should recognise

• Man-in-the-middle — an attacker secretly sits between you and a service on open Wi-Fi, reading or altering traffic; HTTPS and VPNs defeat it
• Fake hotspots — a free Wi-Fi name that looks like the café’s but belongs to an attacker
• Port scanning — knocking on every “door” of a system to find open, weak services — the reason unused services should stay off
• Denial of service (DoS) — flooding a service with traffic until real users cannot reach it

Secure your home network today

• Change the router’s default admin password — this is the single most skipped step
• Use WPA2 or WPA3 with a long, unique Wi-Fi password
• Update router firmware when the maker offers it
• Turn off remote management from the internet unless you truly need it
• Put a guest network between visitors and your main devices when your router supports it

Practice task (30 minutes)

Log in to your home router’s admin page, find three things: the Wi-Fi security mode, the admin password setting, and the firmware version. Change the admin password if it is still the default, confirm WPA2/WPA3 is on, and write down what you found. Do not change settings you do not understand — observation first.