Dear Researchgators;
For the researchers who are specialized in Cybersecurity and/or Network Security, would you please tell us a little about the difference between Cybersecurity and Network Security.
Are they both the same?
Are they different fields?
One is a subset of the other?
It would be great if you can support me with a reference?
Actually, this is not my area of interest but I am doing curiously.
Regards
Dear Basim,
I view network security as intrinsic part of cyber security.
Daimi, K., Francia, G., Ertaul, L., Encinas, L. H., & El-sheikh, E. (Eds.). (2018). Computer and network security essentials. Springer.
Dear Basim Mahmood,
You may want to look it over:
Difference between Cyber Security and Network Security
Definition
Cyber security is a subset of information security which refers to a set of techniques and methodologies used to protect integrity of networks, devices, programs, and data from damage, attack, or unauthorized access. In simple terms, cyber security is the practice of protecting internet-connected systems and networks from digital attacks. Network security, on the other hand, is the act of protecting files and directories in a network of computers against misuse, hacking, and unauthorized access to the system. Network security is a subset of cyber security which protects the integrity of your network and network-accessible resources from unauthorized access.
Read more: Difference between Cyber Security and Network Security | Difference Between
http://www.differencebetween.net/technology/difference-between-cyber-security-and-network-security/#ixzz7Zk8MzVed
Variations on the theme.
However, everything that travels on the web is insecure.
They surely look close in referring to the communication space, but network security is a subset of cyber security. Cyber security includes more, such as securing infrastructure beyond the network, securing the host computers and other terminal equipment, and relevant personnel, among others.
Brooks, C. J., Grow, C., Craig, P. & Short, D. (2018). Cybersecurity Essentials. John Wiley & Sons
Hello,
Thank you for the question and great answers are posted.
Cybersecurity is the practice of securing the confidentiality, integrity and availability (known as CIA triad) of an enterprise information technology (set of) assets.
Article Review and insight on the behavioral aspects of cybersecurity
Network security is a subset as it aim to prevent and protect networks against unauthorized access. You can find SANS (https://www.sans.org/) more detailed definition here:
https://www.proquest.com/docview/2063502064?accountid=10003&forcedol=true&pq-origsite=primo&forcedol=true
It's easy to think of them as "synonyms", but they aren't. Especially when considering career paths. For example, we need to know that network security is part of enterprise cybersecurity architecture/functional area. Some other components of functional areas are system administration, application security (e.g. email), incident response, data protection and cryptography, etc.
In my view, the first distinction is that network security is a subset of cybersecurity. Second, it's a lot easier to define network security than cybersecurity, because the former is constrained to a specific set of (communication) technologies, and generally speaking to "data in motion". Neither of those constraints is true for cybersecurity, no matter how narrowly you define it, because cybersecurity encompasses communication and non-communication technologies, data at rest and in motion, and other factors.
Personally, because "cybersecurity" is used by different stakeholders to mean so many different things, I try to advocate for a fairly strict definition. I think the term "cybersecurity" is most useful when it is used to refer only to the following things:
1 - the security of digital elements of a nation's critical national infrastructure (so, for instance, communications networks, online payments, IT systems that underpin transport, energy and other utilities, and the state's own IT estate.
2 - securing against attacks on digital and non-digital elements of critical national infrastructure, where those attacks are carried out by digital means (for instance, ransomware and DDoS attacks on elements of critical national infrastructure). NB - this second part of the definition is loose enough to include, say, phishing attacks on government ministers.
I think framing cybersecurity in terms of critical national infrastructure is broad enough to encompass a lot of essential topics, but not so broad as to make it simply a synonym for "IT security", which I don't think is productive.
Others will have different views, but I hope this spurs some useful and constructive thoughts.
Thank you all for your professional responses. It is really appreciated
En mi opinión es clave ISO 27032, en la relación entre ciberseguridad y otros dominios, ahi determinan la ciberseguridad debe cubrir parte de la seguridad de redes, pero no son subdominios una de otras (son areas conectadas), esto ya que como dijo alguien mas arriba el dominio amplio es la seguridad de la información.
In my opinion, network security is a subset of cybersecurity. Cybersecurity is securing data in rest and in transition, whereas network security is securing the infrastructure through which the data is transited.
