{"id":5893,"date":"2020-11-11T17:52:24","date_gmt":"2020-11-11T15:52:24","guid":{"rendered":"https:\/\/tekmart.co.za\/t-blog\/?p=5893"},"modified":"2020-11-11T17:53:20","modified_gmt":"2020-11-11T15:53:20","slug":"cloud-security-vs-network-security-whats-the-difference","status":"publish","type":"post","link":"https:\/\/tekmart.co.za\/t-blog\/cloud-security-vs-network-security-whats-the-difference\/","title":{"rendered":"Cloud security vs. network security: What’s the difference?"},"content":{"rendered":"Reading Time-approximately:<\/span> 2<\/span> minutes<\/span><\/span>\n

While network security focuses on solely protecting networks, cloud security provides protection for networks, servers, containers, apps and more.<\/strong><\/h2>\n\n\n\n
\"Andrew<\/figure>\n\n\n\n

By Andrew Froehlich<\/a><\/p>\n\n\n\n

Cloud computing has been around for a while, but confusion still surrounds the correct meaning of certain terms. An example of this is differentiating between cloud security vs. network security.<\/p><\/blockquote><\/figure>\n\n\n\n

First, let’s look at the term network security <\/em>to understand what it encompasses. We’ll then turn to cloud security vs. network security to see how the two are related yet different in several key areas.<\/p>\n\n\n\n

What is network security?<\/strong><\/h3>\n\n\n\n

Network security focuses on tools used to protect data, applications and resources at the network level. The primary focus is to protect against unauthorized access into or between parts of the overall network infrastructure.<\/p>\n\n\n\n

When most people think about unauthorized access, they tend to imagine a person or device that attempts to connect to the wired or wireless LAN without authorization.<\/p><\/blockquote>\n\n\n\n

The\u00a0network security tools\u00a0to prevent against this type of unauthorized access include network access control and enterprise mobility management platforms for both wired and wireless networks.<\/p>\n\n\n\n

Another way to protect against unauthorized access is to place a firewall and an\u00a0intrusion prevention system\u00a0(IPS)<\/strong> at the corporate network’s internet edge. These tools protect against bad actors that aim to use network, server and application vulnerabilities within maliciously crafted packets to gain access to internal resources.<\/p>\n\n\n\n

\"\"\/
In network security, the first line of defense is the network border.<\/strong><\/figcaption><\/figure>\n\n\n\n

Other external attack methods include email attacks, malicious websites, brute-force attacks and\u00a0distributed denial-of-service\u00a0attacks. A firewall, IPS, network-centric email and secure web gateway can handle these issues as well.<\/p>\n\n\n\n

Network security also provides a way for remote users on the internet to securely access internal data and applications, while preventing access for all others. Both site-to-site and remote access VPNs fulfill this purpose.<\/p><\/blockquote>\n\n\n\n

Finally, the network layer is a great place to monitor for malicious activity within corporate infrastructure. Modern\u00a0network detection and response\u00a0systems use packet capture, NetFlow and other streaming network telemetry methods to baseline normal network behavior and alert security administrators when changes to network behavior may indicate a network breach.<\/p>\n\n\n\n

What is cloud security?<\/strong><\/h3>\n\n\n\n

Cloud security and network security differ\u00a0because the term\u00a0cloud security<\/em>\u00a0encompasses more of the overall corporate infrastructure than network security.<\/p>\n\n\n\n

Generally, when people\u00a0refer to cloud security, it’s in the context of IaaS cloud environments that third-party service providers offer. In this case, cloud security not only includes network security tools, but also server-, container-, application- and service-level security.<\/p>\n\n\n\n

Security tools for cloud networks may or may not be the same as the private corporate network. In most cases, IaaS providers will offer their own proprietary network security services, such as firewalls, IPSes and VPN connectivity.<\/p><\/blockquote>\n\n\n\n

Alternatively, businesses may opt to deploy VMs on an\u00a0IaaS cloud environment\u00a0that can run the exact same security platforms they operate on the corporate LAN. IT teams can find these third-party security tools on the service provider’s third-party cloud marketplace.<\/p>\n\n\n\n

Beyond the network, cloud security can also include the following protections:<\/p>\n\n\n\n