Políticas de seguridad para mitigar las vulnerabilidades de los ataques VLAN HOPPING a nivel de la capa de enlace de datos en redes LAN.

Abstract

In this paper, security policies were implemented to mitigate vulnerabilities of virtual local area network attacks (VLAN HOPPING). The study showed that network administrators do not pay attention to the security of data link layer devices. Also, the lack of adequate security policies facilitates several attacks that can be generated by internal users allowing unauthorized access to the resources and services of the network infrastructure. For this, the Pentesting methodology was applied in four phases. In the first phase, information was collected regarding the network equipment. In the second, vulnerabilities were identified through scanning. In the third phase, the vulnerabilities were exploited in a simulated scenario with the intrusion test by applying the switch suplantation attack (Switch Spoofing). That simulates being a switch and the double-tagged attack (Double Tagging) where the attacker sends data with two headers 802Q. The penetration tests were performed with the Yersinia tool. In the fourth phase, a report was made detailing the vulnerabilities discovered. In the end, security policies were drawn up at a technological and organizational level, taking ISO 27002 as a reference and, whit their application VLAN HOPPING vulnerabilities were mitigated 100%. To achieve this result, it is advisable to apply the proposed policies together.