Implementação de boas práticas ao protocolo spanning tree (IEEE 802.1d) para prevenir a exploração de vulnerabilidades e incidentes de rede

Abstract

This empirical study addressed that attempts to exploit vulnerabilities in network protocols and instances of incidents in organizations became something very common, due to ease of finding tools that simplifies and automates the execution of illicit activities, whether by experienced people or beginners simply follow a tutorial found on several websites and videos on the Internet. Professionals working in the field need to constantly adopt good security practices for your network infrastructure. Through the use of types of methods of literature research, exploratory, experimental and case study demonstrated how an attacker through your notebook, used a tool called Yersinia to exploit specific vulnerabilities of the Spanning Tree Protocol, IEEE standard as 802.1de incidents may occur, impacting the organization. To accomplish the aim, a redundant link topology has been assembled and practical tests were performed in order to prove the effectiveness of the procedures. Also the capture of network traffic which provided visibility and enabled the analysis of the protocol behavior was performed. As a result, sought to emphasize the information technology professionals, the need to implement best practices for the STP protocol in order to avoid, proactively, the vulnerability exploitation and the occurrence of incidents, in particular for small and midsize.