Attacks on switches.
Oleg Petukhov, lawyer in the field of international law and personal data protection, information security specialist security, protection of information and personal data.
Telegram channel: https://t.me/protectioninformation
Telegram Group: https://t.me/informationprotection1
Website: https://legascom.ru
Email: online@legascom.ru
#informationprotection #informationsecurity
At this level, the attacker's arsenal is already expanding significantly, and the system administrator needs to take a number of measures to protect the corporate network.
A switch is a more intelligent device than a hub. As mentioned earlier, switches operate on the OSI model link layer. When it receives a packet to one of its ports, it, unlike the hub, does not forward it to all ports, but forwards it only to the port to which the recipient of the packet is connected.
There are switch models that also support the network layer, but for now we will consider only the link layer.
The following types of attacks are possible at the channel level:
CAM table overflow;
VLAN Hopping;
attack on STP;
MAC spoofing;
attack on PVLAN;
attack on DHCP;
ARP-spoofing.
We will look at each of the attacks in more detail in the following posts.