Posted: August 30th, 2022

Link Layer Protocol

Link Layer Protocol
What are the completely different assaults in opposition to the protocol? How do they work?
What are the vulnerabilities being exploited? How are these vulnerabilities being exploited?
What are the controls we are able to use to place in place to guard in opposition to the vulnerabilities? What does the community structure appear like? How will you defend in opposition to the vulnerabilities?

Create Desk with following info (See Attachment)
Date

The format of the packet exchanged throughout the nodes is outlined by the information hyperlink layer protocol. The protocols additionally carry out actions like retransmission, random entry, error detection and move management. Some examples of the information hyperlink layer protocols embody Ethernet, FDDI, PPP, token ring, ARP, ATM, body relay and 802.1x. Totally different link-layer protocols deal with datagram of various hyperlinks in a path such because the Ethernet, which handles datagram on the primary hyperlink and PPP on the second hyperlink. The Handle Decision Protocol is a communication protocol whose operate is to find the link-layer tackle. The 802.1x community authentication protocol opens ports for community entry when a consumer id is authenticated by a corporation and authorizes community entry.

Protocol Threats/Assaults Vulnerabilities Controls
ARP Spoofing – Handle decision Protocol poisoning refers to a sure sort of assault involving sending ARP messages spoofed by means of an area space community.
Poisoning – this includes ARP cache poisoning and routing of ARP poison. The assaults attempt diverting Visitors from the host that’s initially meant to an attacker.
Sniffing –
Session hijacking/MiM
Denial of service A loophole within the ARP protocol design mechanism that enables the host to obtain an ARP request or packet response and fails to confirm the packet authentication then replaces the ARP cache desk within the authentic entry is a vulnerability.
Unsolicited ARP Reply is one other sort of vulnerability the place a spoofed reply to an ARP request may be despatched to any system. In distinction, the receiving system caches the reply by overwriting the present entry or including an entry. A number of the preventive measures that can be utilized are putting in firewalls and session encryption, comparable to establishing VPNs between methods or networks to stop disclosure assaults. Using sturdy authentication is one other measure. Examples are sturdy passwords and certificates to stop disclosure assaults. Lastly, using laborious coding addresses and port safety.
802.1x Session Hijacking is the type of assault the place the attacker sends a pretend packet to the wi-fi shopper
Man-in-the-Center – the attacker acts because the professional entry level the place he views the Visitors passing by means of the wi-fi shopper and the professional entry level.
Passive Assault to Decrypt Visitors – wi-fi Visitors may be intercepted by a passive eavesdropper till an IV collision happens. What occurs when XORing two packets that use related IV, making the attacker get hold of the XOR of the two-plaintext messages.
Energetic Assault to Inject Visitors – the attacker makes use of the data of the precise plaintext for one encrypted message to assemble the correct encrypted packets. A number of the vulnerabilities embody MAC spoofing, the place the addresses are spoofed by means of sniffing the wi-fi Visitors.
WEP is one other vulnerability that makes use of the RC4 encryption algorithm referred to as a stream cipher. It expands a brief key into an infinite pseudo-random keystream.
Prolonged Service Set ID is a vulnerability whereby many entry factors broadcast the community’s title, giving option to the software program of some purchasers to supply distant wi-fi purchasers with an inventory of obtainable wi-fi networks. Set up of a strong safety community that makes use of the present requirements to enhance authentication, entry management and key administration.
Set up of WEP2 will increase the scale of IV space-enhancing authentications to keep away from staleness.
Quick packet keying improves WLAN’s safety by permitting one to encrypt every packet utilizing a distinct key.
A digital non-public community is the VPN of a client-based IPSec that enables over-the-wire and over-the-air- IPSec encryption of all IP site visitors. It would not matter whether or not wi-fi safety is used.

References
Li, Y., & Li, J. (2016, Could). The analysis on ARP protocol-based authentication mechanism. In 2016 Worldwide Convention on Utilized Arithmetic, Simulation and Modelling. Atlantis Press.
Arora, A. (2018). Stopping wi-fi deauthentication assaults over 802.11 networks. arXiv preprint arXiv:1901.07301.

Order | Check Discount

Tags: Link Layer Protocol