Hello, and welcome to this Protocol Deep Dive on ARP.
In this module,
we will be covering address resolution protocol security related issues.
We will begin with ARP based denial of service,
in particular,
I will show how ARP broadcast storms can occur and what you
can do to prevent or reduce their effects.
As well,
you will see how malicious ARP poisoning is used to blackhole legitimate data.
Next,
I will cover a related attack called switch CAM Table Flooding where the MAC
address table is filled until the switch behaves like a hub,
a serious privacy concern leading to losses of confidentiality
and can be the starting point for other attacks like ARP
spoofing or man-in-the-middle attacks.
In this section,
I will deconstruct how all these issues work and cover a
variety of mitigation techniques along the way.
These will include broadcast rate limiting using storm control,
port security, 802. 1x authentication techniques, and DHCP snooping with dynamic ARP inspection.