##1. The Network as a Graph of Adversarial Opportunity
An isolated computer (an 'air-gapped' host) has an attack surface confined to physical access and removable media. The moment a computer connects a network interface—whether Ethernet, Wi-Fi, or cellular—it becomes a node in a globally interconnected graph.
A computer network is a collection of autonomous computing devices interconnected by transmission media (copper cabling, optical fiber, radio frequencies) that exchange data using standardized protocols. In cybersecurity, however, a network is also an untrusted medium through which adversaries deliver weaponized payloads, inspect metadata, and attempt unauthorized access.
The Air-Gap Fallacy
##2. Nodes, Hosts, Clients, and Servers
| Entity | Technical Definition | Security Perspective |
|---|---|---|
| Node | Any addressable point on a network capable of sending, receiving, or forwarding data (routers, switches, printers, cameras, servers). | Every connected node represents a potential foothold for initial access or lateral pivoting. |
| Host | An end-system node running user applications and operating systems (workstations, mobile devices, compute instances). | Hosts possess process memory, file systems, and user credentials targeted by malware. |
| Client | A host or process that initiates communication requests to remote services. | Subject to client-side attacks: malicious DNS resolution, phishing payloads, and TLS interception. |
| Server | A host or process that continuously listens for incoming network connections to provide services. | Permanently exposed public attack surface; subject to remote code execution, denial of service, and brute-force attacks. |
##3. Peer-to-Peer vs. Client-Server Architecture
In Client-Server architectures, authority and data reside centrally. This concentrates defensive monitoring at the server perimeter, but creates a high-value single target. In Peer-to-Peer (P2P) architectures, every node acts as both client and server, decentralizing resources but expanding the attack surface across every participating peer.