Link Layer Protocol
\nWhat are the different attacks against the protocol? How do they work?
\nWhat are the vulnerabilities being exploited? How are these vulnerabilities being exploited?
\nWhat are the controls we can use to put in place to protect against the vulnerabilities? What does the network architecture look like? How will you protect against the vulnerabilities?<\/p>\n
Create Table with following information (See Attachment)
\nDate<\/p>\n
The format of the packet exchanged across the nodes is defined by the data link layer protocol. The protocols also perform actions like retransmission, random access, error detection and flow control. Some examples of the data link layer protocols include Ethernet, FDDI, PPP, token ring, ARP, ATM, frame relay and 802.1x. Different link-layer protocols handle datagram of different links in a path such as the Ethernet, which handles datagram on the first link and PPP on the second link. The Address Resolution Protocol is a communication protocol whose function is to discover the link-layer address. The 802.1x network authentication protocol opens ports for network access when a user identity is authenticated by an organization and authorizes network access.<\/p>\n
Protocol\tThreats\/Attacks\tVulnerabilities\tControls
\nARP\tSpoofing \u2013 Address resolution Protocol poisoning refers to a certain type of attack involving sending ARP messages spoofed through a local area network.
\nPoisoning \u2013 this involves ARP cache poisoning and routing of ARP poison. The attacks try diverting Traffic from the host that is originally intended to an attacker.
\nSniffing \u2013
\nSession hijacking\/MiM
\nDenial of service\tA loophole in the ARP protocol design mechanism that allows the host to receive an ARP request or packet response and fails to verify the packet authentication then replaces the ARP cache table in the original entry is a vulnerability.
\nUnsolicited ARP Reply is another type of vulnerability where a spoofed reply to an ARP request can be sent to any system. In contrast, the receiving system caches the reply by overwriting the existing entry or adding an entry.\tSome of the preventive measures that can be used are installing firewalls and session encryption, such as establishing VPNs between systems or networks to prevent disclosure attacks. The use of strong authentication is another measure. Examples are strong passwords and certificates to prevent disclosure attacks. Lastly, the use of hard coding addresses and port security.
\n802.1x\tSession Hijacking is the kind of attack where the attacker sends a fake packet to the wireless client
\nMan-in-the-Middle \u2013 the attacker acts as the legitimate access point where he views the Traffic passing through the wireless client and the legitimate access point.
\nPassive Attack to Decrypt Traffic \u2013 wireless Traffic can be intercepted by a passive eavesdropper until an IV collision occurs. What happens when XORing two packets that use similar IV, making the attacker obtain the XOR of the two-plaintext messages.
\nActive Attack to Inject Traffic \u2013 the attacker uses the knowledge of the exact plaintext for one encrypted message to construct the right encrypted packets.\tSome of the vulnerabilities include MAC spoofing, where the addresses are spoofed through sniffing the wireless Traffic.
\nWEP is another vulnerability that uses the RC4 encryption algorithm called a stream cipher. It expands a short key into an infinite pseudo-random keystream.
\nExtended Service Set ID is a vulnerability whereby many access points broadcast the network’s name, giving way to the software of some clients to provide remote wireless clients with a list of available wireless networks.\tInstallation of a robust security network that uses the current standards to improve authentication, access control and key management.
\nInstallation of WEP2 increases the size of IV space-enhancing authentications to avoid staleness.
\nFast packet keying improves WLAN’s security by allowing one to encrypt each packet using a different key.
\nA virtual private network is the VPN of a client-based IPSec that allows over-the-wire and over-the-air- IPSec encryption of all IP traffic. It doesn’t matter whether wireless security is used.<\/p>\n
References
\nLi, Y., & Li, J. (2016, May). The research on ARP protocol-based authentication mechanism. In \t2016 International Conference on Applied Mathematics, Simulation and Modelling. \tAtlantis Press.
\nArora, A. (2018). Preventing wireless deauthentication attacks over 802.11 networks. arXiv \tpreprint arXiv:1901.07301.<\/p>\n","protected":false},"excerpt":{"rendered":"
Link Layer Protocol What are the different attacks against the protocol? How do they work? What are the vulnerabilities being exploited? How are these vulnerabilities\u2026<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8945,8946,8950,8948,8947,8949],"tags":[8849,8851,142,8839,8852,8654,8848,147,636,7877,8850,8847,8846,8842,8844,8845,8840,8838,8841,8843,7630],"class_list":["post-101137","post","type-post","status-publish","format-standard","hentry","category-criminal-justice-essay-writing-service","category-criminology-homework-help-answers","category-high-quality-research-paper-writing-services-for-students","category-law-dissertation-help-best-law-dissertation-writing-service","category-law-essay-writing-service-by-lawyers","category-law-thesis-writing-service-hire-a-legal-writers","tag-assignment-writing-homework-help","tag-best-essay-writing-website","tag-best-online-essay-writing-services","tag-capstone-project-writer","tag-college-application-essay-writing-service","tag-dissertation-writer","tag-do-my-homework-assignment","tag-essay-online-essay-writer-buy","tag-essay-writer","tag-free-help-with-homework-assignments","tag-help-me-with-my-homework","tag-help-with-assignments-online","tag-homework-assignment-help-online","tag-my-write-writing-service-essay-custom","tag-need-help-with-homework-assignments","tag-online-writing-homework-assignment-help","tag-research-paper-writer","tag-term-paper-writer","tag-us-based-essay-writing-service","tag-write-essays-for-money-online","tag-write-my-essay-online-free"],"_links":{"self":[{"href":"https:\/\/www.studyproessays.com\/help\/wp-json\/wp\/v2\/posts\/101137","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.studyproessays.com\/help\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.studyproessays.com\/help\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.studyproessays.com\/help\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.studyproessays.com\/help\/wp-json\/wp\/v2\/comments?post=101137"}],"version-history":[{"count":0,"href":"https:\/\/www.studyproessays.com\/help\/wp-json\/wp\/v2\/posts\/101137\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.studyproessays.com\/help\/wp-json\/wp\/v2\/media?parent=101137"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.studyproessays.com\/help\/wp-json\/wp\/v2\/categories?post=101137"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.studyproessays.com\/help\/wp-json\/wp\/v2\/tags?post=101137"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}