Networking, the Internet, and Cybersecurity Fundamentals

Overview of Computer Networks

  • Definition of a Computer Network: A collection of interconnected computers and hardware devices linked together to facilitate the sharing of information and resources.
  • Sharable Information Types:
    • Files and Documents: Text files, electronic records, media files, and document spreadsheets.
    • Electronic Messages: Emails, direct messaging feeds, and network-transmitted communication signals.
    • Database and Centralized Information Systems: Shared administrative datasets including student academic records, medical patient records, and institutional databases.
  • Sharable Hardware Resources:
    • Output and Input Hardware: Networked printers, scanners, display projectors, external monitors, and centralized speaker systems.
    • Storage Hardware: Centralized external storage devices, network-attached storage (NAS), and shared server storage arrays.
    • Hardware Integration: All shared physical devices are linked directly into the network alongside connected host computers.

Network Classifications

  • Classification Criteria: Networks are analyzed and designed by classifying them according to Geographic Scope, Ownership, and Topology.
  • Classification by Geographic Scope:
    • Personal Area Network (PAN):
      • Span: Very small operational range, typically spanning a few meters around an individual.
      • Examples: A Bluetooth headset paired with a smartphone, or a wireless keyboard connected to a personal computer (PC).
    • Local Area Network (LAN):
      • Span: Confined to a single building, localized group of buildings, or a small academic/corporate campus.
      • Examples: An office intranet, or a university campus network (which functions as a collection of interconnected LANs).
    • Metropolitan Area Network (MAN):
      • Span: Encompasses an entire city or a large municipal community.
      • Examples: A citywide public Wi-Fi network.
    • Wide Area Network (WAN):
      • Span: Covers extensive geographic spans, reaching regional, national, or global distances.
      • Examples: The Internet represents the largest existing WAN.
  • Classification by Ownership:
    • Open Network: Built upon open technical standards that any individual or entity can implement without paying licensing fees or requiring regulatory permission.
      • Example: Unrestricted public Wi-Fi offered at a commercial café.
    • Closed (Proprietary) Network: Privately owned and managed by a specific company, institution, or individual; requires user authentication and access clearance.
      • Examples: University Wi-Fi networks requiring student/faculty credentials, or home Wi-Fi networks secured with a password.

Network Topologies and Hardware Infrastructure

  • Definition of Network Topology: The structural layout—either physical or logical—that defines how computers and peripherals are linked within a network.
  • Bus Topology:
    • Architecture: All member devices share a single, continuous communication line known as the bus.
    • Communication Mechanism: Data transmissions are broadcast across the shared line; every connected device receives the signal, but only the specific device matching the destination address accepts and processes the data.
  • Star Topology:
    • Architecture: All network devices connect directly to a single central node.
    • Communication Mechanism: The central node manages and coordinates all data transmission between member devices.
    • Prevalence: Standard implementation in modern Wi-Fi networks and modern wired Ethernet LANs.
  • Network Interconnection Devices:
    • Hub: A non-intelligent physical-layer device that blindly relays incoming signals to every single connected machine without filtering destination addresses.
    • Switch: An intelligent network hardware device that reads packet addresses and forwards messages exclusively to the intended recipient device, optimizing bandwidth and efficiency.
    • Access Point (AP): A wireless central node utilized in star topologies to coordinate communication among wireless client devices.
    • Gateway: A network exit/entry boundary point that connects distinct networks operating on different protocols or segments, frequently implemented via a router.

Network Protocols and Access Control Protocols

  • Definition of Network Protocols: Formally defined sets of rules governing data transmission and interaction between networked devices. Protocols enforce compatibility, operational reliability, and ordered communication, preventing data collisions, signal confusion, and packet loss.
  • Carrier Sense Multiple Access with Collision Detection (CSMA/CD):
    • Operational Scope: Historical protocol used primarily in wired bus topology networks.
    • Mechanism: Devices listen to the shared medium before transmitting; if two devices transmit simultaneously and a collision occurs, the collision is detected, transmission stops, and devices wait a random duration before retransmitting.
  • Carrier Sense Multiple Access with Collision Avoidance (CSMA/CA):
    • Operational Scope: Utilized in wireless star networks (such as Wi-Fi).
    • The Hidden Terminal Problem: In wireless environments, physical obstacles or spatial distances can prevent two devices (e.g., Device A and Device C) from hearing each other's signals, even though both are within range of the central Access Point (AP). Consequently, both devices may perceive the channel as idle simultaneously and transmit data at the same time, resulting in a collision at the AP. Because the devices cannot detect each other's transmissions, traditional collision detection (CSMA/CD) fails in wireless configurations.
    • Collision Avoidance Solution (RTS/CTS Protocol):
      • Instead of detecting collisions after they happen, wireless devices attempt to prevent them entirely.
      • A device sends a Request-To-Send (RTS) signal packet to the central Access Point (AP).
      • If available, the AP responds by broadcasting a Clear-To-Send (CTS) signal.
      • The CTS packet confirms to the requesting device that it is safe to transmit, while simultaneously notifying all other listening devices in the cell to remain silent during the allocated transmission window.
      • While collisions can still occasionally occur due to environmental factors, CSMA/CA drastically reduces their frequency.

Interprocess Communication (IPC) Models

  • Definition of Interprocess Communication: The mechanisms and models used by running software programs (processes) to exchange data, coordinate actions, and execute remote requests across a network.
  • Client-Server Model:
    • Roles: A clear structural division separates client processes from server processes.
    • Dynamics: Client processes initiate service requests; server processes continuously listen for requests and provide responses or resources (such as database queries or webpage files).
  • Peer-to-Peer (P2P) Model:
    • Operational Dynamics: All participating processes act as structural equals (peers). Every peer node possesses the capability to both request services and provide services to other network members.
    • Infrastructure: Operates without a permanent, centralized server; member nodes establish direct network connections with one another.
    • Application Examples:
      • Instant Messaging: Each user endpoint concurrently transmits and receives message payloads.
      • Online Gaming: Multiple player terminals interact directly to synchronize real-time game states.
    • Characteristics: Represents a highly scalable, decentralized model that distributes computational and bandwith workloads; however, it presents security and regulatory challenges (e.g., managing copyright infringement in P2P file-sharing networks).

Practical Integration of Networking Concepts

  • Conceptual Alignment: Network design integrates physical/logical structure (Topology), interaction guidelines (Communication Protocols), and software architecture (IPC Models).
  • Applied Case Study: Downloading a PDF File via Home Wi-Fi:
    • Integrated Topology (Star): The home Wi-Fi router serves as the central Access Point (AP). End-user devices (laptop, mobile phone, smart TV) establish direct wireless links to the router rather than connecting to each other.
    • Integrated Protocol (CSMA/CA): To avoid channel interference among multiple home devices attempting to utilize the wireless spectrum, the laptop sends an RTS request to the router and waits for a CTS response before transmitting data packets.
    • Integrated IPC Model (Client-Server): Once granted wireless access, the laptop (acting as the client process) sends a request for the target document. The external web server storing the PDF processes the request and returns the file data. The local router acts strictly as a signal intermediary, passing the request and response across the Internet without modifying the underlying content.

Distributed Systems: Cloud and Cluster Computing

  • Definition of Distributed Systems: Architecture wherein a collection of independent, networked computers coordinate their actions to present themselves to users as a single, unified computing platform.
  • Key Characteristics:
    • High Reliability: Fault-tolerant architecture ensures that if an individual node fails, remaining nodes absorb the operational workload.
    • Scalability: Processing power and capacity can be expanded by integrating additional computing nodes.
    • Core Capabilities: Provides scalable remote storage, massive parallel computation, and enterprise collaboration environments.
  • Cloud Computing:
    • Architecture: Uses expansive networks of remote servers hosted across the Internet to store, manage, and compute data, freeing local client machines from hosting duty.
    • Core Components:
      1. Front-End (User Side): Client interface software including web browsers, mobile applications, or desktop programs.
      2. Back-End (Cloud Infrastructure): Remote data center hardware comprising physical servers, enterprise storage arrays, and high-speed network switches.
      3. Middleware: Specialized software platforms that execute load balancing, user authentication, resource allocation, and fault-tolerance procedures.
    • Workflow Example (Google Drive Photo Upload):
      • User selects a photo to upload via the client app interface (Front-End).
      • The payload travels over the Internet to the service data infrastructure (Back-End).
      • Middleware authenticates user rights, locates available storage across server arrays, and writes multiple redundant copies across disparate locations.
      • Subsequent download requests fetch the file from the nearest available storage server.
  • Cluster Computing:
    • Architecture: A group of tightly coupled computers co-located within a single physical facility (e.g., a laboratory, university facility, or corporate data center) operating as a unified high-performance machine.
    • Primary Objective: Delivers high processing throughput, extreme reliability, and parallel computing power.
    • Core Components:
      1. Nodes (Computers): Discrete computing hardware containing CPUs, memory, and storage.
        • Head Node: Controls and manages cluster operations, breaks complex computational tasks into sub-tasks, assigns work to worker nodes, and compiles final outputs.
        • Worker Nodes: Execute compute tasks concurrently in parallel.
      2. Network (High-Speed Interconnect): Ultra-fast local interconnects (such as high-speed Ethernet or dedicated fabrics) linking all nodes.
    • Workflow Example (University Weather Simulation):
      • A researcher submits a complex atmospheric model program to the Head Node.
      • The Head Node divides the simulation domain into smaller geographic or temporal sub-chunks.
      • Worker Nodes execute regional calculations in parallel.
      • Worker Nodes return completed sub-results to the Head Node, which synthesizes the final weather forecast.

Internet Architecture and IP Addressing

The Internet history and scope slide from Fairmont State University COMP1100

  • Origins and Evolution of the Internet:
    • Etymology: Designated with a capitalized "I", the Internet is defined as a global network of interconnected networks.
    • Historical Origins: Conceptualized and initiated in the 1960s1960\text{s} by DARPA (Defense Advanced Research Projects Agency).
    • Foundational Goal: To construct a robust, fault-tolerant communication network capable of maintaining communication integrity even if major nodes or subsections were disrupted.
    • Historical Transition Sequence: Government Research Project →\rightarrow Academic Research Network →\rightarrow Global Commercial Infrastructure.
    • Modern Interconnection: Integrates millions of PANs, LANs, MANs, and WANs worldwide.
  • Internet Service Provider (ISP) Hierarchy:
    • Tier-1 ISPs: Form the core backbone of the global Internet. Comprise ultra-high-speed, international fiber networks owned by major telecommunication entities (e.g., AT&T, Verizon, NTT Communications).
    • Tier-2 ISPs: Large national-level providers that purchase transit access from Tier-1 ISPs to offer global reachability (e.g., Comcast).
    • Tier-3 ISPs: Local or regional telecommunications and cable companies that sell Internet access directly to end consumers.
    • Architectural Resilience: Built with extensive hierarchical redundancy, making the overall Internet scalable and resistant to localized outages.
  • Entities Assigned IP Addresses:
    • Client Devices: Computers, smartphones, tablets, and smart appliances.
    • Websites and Web Servers: Web applications run on host web servers that possess unique IP addresses. Large-scale web services (e.g., Amazon, YouTube, Facebook) utilize thousands of servers worldwide; Domain Name System (DNS) queries route users to the geographically closest or least loaded server IP address, meaning a website's resolved IP can vary by location and time.
    • Networking Hardware: Switches, routers, and gateways require IP addresses for management and routing (e.g., a standard residential router internal address of 192.168.1.1192.168.1.1).
    • Virtual Systems: Cloud virtual machines, software VPN tunnels, and virtualized services are allocated distinct IP addresses.
  • Domain Name System (DNS):
    • Domain Names: Human-friendly text identifiers (e.g., fairmontstate.edu, wikipedia.org) mapped directly to numerical IP addresses.
    • DNS Function: Functions as a global distributed database responsible for translating user-entered domain names into target numerical IP addresses via a process known as a DNS lookup.

Dynamic IP Management, DHCP, and Network Address Translation

  • Dynamic Host Configuration Protocol (DHCP): Network service protocol running on routers or server hardware that automatically assigns IP addresses and network parameters to client devices upon joining a network.
  • IP Behavior Across Network Transitions:
    • Because every Wi-Fi network represents an independent LAN, a device migrating between networks receives a new IP address allocated from the local DHCP address pool.
    • Example Scenario: A laptop receives private IP address 192.168.1.186192.168.1.186 on a home Wi-Fi network, but receives IP address 172.16.54.90172.16.54.90 when connecting to a university campus Wi-Fi network.
  • IP Allocation Modes on a Single Network:
    • Dynamic Assignment (Default): The local DHCP server issues an available address from its dynamic pool. IP assignments can change across sessions (e.g., receiving 172.16.54.90172.16.54.90 today and 172.16.55.13172.16.55.13 tomorrow).
    • DHCP Lease and Reservation: The DHCP server logs a device's unique physical address—the MAC address (Media Access Control address). If the device reconnects within a specified lease time (e.g., 24 hours24\text{ hours}), the server reassigns its previous IP address.
    • Static IP Assignment: Fixed, unchangeable IP addresses manually configured by IT administrators (common for infrastructure servers, network printers, and laboratory hardware).
  • Network Address Translation (NAT):
    • A routing technology that maps private IP addresses used within a local network to a single public IP address visible to the external Internet.
    • Example Scenario: Thousands of individual user devices inside a university network hold unique local private IPs, but present a single shared public IP address to external web servers across the Internet.

Internet Application Protocols and Services

  • Overview: High-level user applications built upon foundational network transport protocols.
  • Electronic Mail Protocols:
    • SMTP (Simple Mail Transfer Protocol): Governs outgoing email transmission between mail servers.
    • POP3 (Post Office Protocol 3): Retrieves emails by downloading them directly to a local client and removing them from the server.
    • IMAP (Internet Message Access Protocol): Synchronizes emails across multiple client devices while maintaining master copies on the mail server.
  • Voice over Internet Protocol (VoIP):
    • Function: Enables real-time audio communication over digital packet-switched networks instead of traditional analog telephone networks.
    • Mechanism: Analog voice signals are digitized, split into small data packets, routed over the Internet, and reassembled into clear audio at the receiving endpoint.
    • Encryption: Standard services implement End-to-End Encryption (E2EE) to scramble audio packets so that third parties and service providers cannot listen in.
    • Software Examples: Skype, Zoom, Google Meet, Messenger calls, WhatsApp calls, and Microsoft Teams.
  • Internet Multimedia Streaming: Delivering continuous video/audio streams over broadband networks (e.g., watching lecture recordings on YouTube or streaming films on Netflix).
  • File Transfer Services: Protocol services enabling file upload/download actions across remote nodes (e.g., submitting coursework to Google Drive or fetching a course syllabus PDF from a web server).
  • Remote Access: Direct access to remote terminal sessions (e.g., utilizing SSH - Secure Shell) to execute command-line operations and edit remote files securely.
  • The Web: Client-server hypermedia delivery operating over HTTP/HTTPS.

The World Wide Web Architecture and Web Technologies

  • Distinction Between Internet and Web: The World Wide Web (WWW) is an application layer platform running on top of the physical infrastructure of the Internet. It consists of interlinked web documents connected via hyperlinks and addressed via URLs.
  • Core Architectural Components:
    • Web Browsers: Client applications (e.g., Google Chrome, Mozilla Firefox, Apple Safari, Microsoft Edge) that request, parse, and display web pages.
    • Web Server Software: Server programs (e.g., Apache, Nginx, Microsoft IIS) designed to process incoming HTTP requests and serve web assets.
    • Web Server Hardware: Physical enterprise computers hosting web server software and database engines.
    • Uniform Resource Locators (URLs): Standardized global addresses formatting resource locations.
      • Standard Syntax: protocol://domain/path/file
      • Explicit Example: https://www.fairmontstate.edu/academics/affairs/syllabus-statements.aspx
    • HTTP / HTTPS Protocols:
      • HTTP (Hypertext Transfer Protocol): Rules establishing transaction requests and responses between web browsers and servers.
      • HTTPS (HTTP Secure): Encrypted version of HTTP utilizing cryptographic algorithms to protect transmitted data against interception.
  • Web Page Construction Languages:
    • HTML (HyperText Markup Language): Structural markup language that uses tags (such as <p>, <h1>, <a>, <img>) to organize page content, headers, graphics, and anchor links.
    • CSS (Cascading Style Sheets): Formatting code defining presentation, visual layout, typography, and color schemes.
    • JavaScript: Client-side scripting language providing dynamic interactivity, animations, and real-time interface logic.
  • Processing Spheres:
    • Client-Side Activities: Computations performed directly inside the user's web browser (e.g., rendering HTML markup, styling CSS rules, executing JavaScript input validations before form submission).
    • Server-Side Activities: Processing operations executed on distant cloud/web servers (e.g., executing database queries, verifying login credentials, generating dynamic customized HTML responses).

Cybersecurity Foundations, Threats, and Defense Mechanisms

  • Definition and Etymology:
    • Cybernetics: Term coined in the 1940s1940\text{s} by Norbert Wiener to define the study of control and communication mechanisms in machines and living organisms.
    • Modern Prefix Usage: "Cyber" relates to computers, digital communications, and virtual network spaces.
    • Cyberspace: The complex virtual landscape formed by globally connected computing systems.
    • Cybersecurity: Technologies, operational policies, and protective measures engineered to defend digital hardware, networks, and data from unauthorized access or malicious attack.
    • Cybercrime: Criminal activities executed via computer infrastructure and network vectors.
  • Categories of Malicious Software (Malware):
    • Viruses: Malicious programs that attach themselves to legitimate host files and execute/spread upon execution of the infected program.
    • Worms: Standalone, self-replicating programs that propagate automatically across network links without needing host file execution.
    • Trojan Horses: Destructive software disguised as desirable or legitimate software to trick users into installation.
    • Spyware / Adware: Hidden software designed to secretly track user keystrokes, browser actions, and personal data, or inject unauthorized advertising.
    • Ransomware: Cryptographic malware that encrypts a victim's storage drive and demands ransom payments in exchange for decryption keys.
  • Social Engineering and Identity Attacks:
    • Phishing: Deceptive communication (such as fraudulent emails or cloned sites) disguised as trusted entities to steal credentials or financial details.
    • Spear Phishing: Highly tailored phishing attacks directed at specific targeted individuals or organizational employees.
    • Social Engineering: Psychological manipulation of individuals to trick them into revealing confidential passwords or granting unauthorized physical/digital system access (e.g., impersonating IT support helpdesk staff).
  • Network and Operational Attacks:
    • Denial of Service (DoS): Flooding a targeted server or network with excessive artificial traffic to consume resources and cause service disruption for legitimate users.
    • Man-in-the-Middle (MITM) Attacks: Eavesdropping attacks where an adversary secretly intercepts, alters, or relays communication sessions between two unsuspecting endpoints (e.g., deploying a fake Wi-Fi access point in a public location to capture plaintext log-in credentials).
    • Data Breaches and Unauthorized Access: Intrusion events exploiting software vulnerabilities, weak default passwords, unpatched systems, or stolen access keys to exfiltrate private internal records.
  • Cybersecurity Defenses:
    • Firewalls: Hardware components or software packages that monitor incoming and outgoing traffic, filtering packets based on defined security rules.
    • Intrusion Detection and Prevention Systems (IDPS): Software tools that continuously monitor network traffic for suspicious anomaly signatures, generating administrative alerts and actively blocking detected intrusion traffic.
    • Encryption Platforms: Cryptographic scrambling of plaintext into unreadable ciphertext to guarantee confidentiality across HTTPS, VPN tunnels, and email platforms.
      • Symmetric Encryption: Utilizes a single shared secret key for both encryption and decryption operations.
      • Asymmetric Encryption: Employs mathematically linked public-and-private key pairs (where the public key encrypts data and the private key decrypts it).
    • Authentication Systems: Access barriers combining passwords, biometric verification, and Multi-Factor Authentication (MFA).
    • Patch Management: Routinely applying software security updates to close identified system vulnerabilities.
    • Security Education: Institutional training policies teaching users to identify social engineering traps and utilize strong credential management.

Data Transformation Standards: Encoding versus Encryption

  • Encoding:
    • Primary Objective: Focuses on data usability, format standardization, and transport compatibility across disparate computational systems.
    • Mechanism: Transforms data formats using publicly available rules and standardized algorithms.
    • Security Factor: Provides no secrecy or confidentiality; anyone can decode encoded data using standard public rules.
    • Practical Example: Compressing multiple files into a .zip archive for storage optimization, or converting data into ASCII/Base64 standard formats for transmission.
    • Reversal Process: Termed Decoding.
  • Encryption:
    • Primary Objective: Focuses on data security, access restriction, and confidential integrity.
    • Mechanism: Uses complex mathematical cryptographic algorithms requiring a secret key to scramble plaintext into unreadable ciphertext.
    • Security Factor: High secrecy; data cannot be deciphered by unauthorized parties lacking the secret decryption key.
    • Practical Example: Encrypting user passwords and sensitive login parameters over HTTPS connections.
    • Reversal Process: Termed Decryption.
  • Scientific Field: Encryption represents an applied subfield within the domain of Cryptography.