Design and analysis of data link impersonation attack for wired LAN application layer services

Abstract

Impersonation attack, also known as MAC spoofing, is widespread in wireless local area networks. Under this attack, the senders cannot control the device that listens to their traffic. On the other hand, the physical layer of the wired local area network is more secure, where the traffic is transmitted through cables and network nodes to the intended receivers. Each network node builds its MAC address table, which states stations that are physically connected (directly or indirectly) to each port, so traffic encryption is an unnecessary process. This paper discusses the design and testing of a new attack called a data link impersonation attack. In this attack, the attacker is considered a hardware intruder that deceives data link layer apparatus like the switches of layer two or three, taking advantage of a vulnerability in the MAC address table of the network nodes. That leads the network switches to send all the network traffic to the intruder instead of the real network device (usually a network service provider under attack). Intruder accepts all incoming requests/traffic from the service requester. If the intruder does not reply to the received requests sent by service requesters, it acts as a black hole intruder, simply causing a denial-of-service attack. If an intruder responds to these requests with fake replies to steal information from service requesters, it acts as a white hole intruder. During the attack, the intruder is transparent for the whole network and does not affect overall network performance and generally the network services, so it is so hard to be discovered by the network software running the network apparatus. Different scenarios were tested using different network simulators and physical networks (CISCO L2/L3 switches). It is demonstrated that the attacker is successfully denied the service/application under attack. The proposed attack reveals the new vulnerability of the wired local area network and opens the door for network scientists to enhance network software that runs the network apparatus immune against the proposed attack.

Approaches to Developing Key Distribution Protocols Based on Quantum Key Distribution

“…User impersonation [7] is an attempt to substitute one user for another. The intruder, acting on behalf of one party and fully mimicking its actions, receives responses of a specific format necessary to forge individual protocol steps.…”

Seamless Connections: Harnessing Machine Learning for MAC Optimization in Home Area Networks

“…The value of σ2 is obtained using the error mean square, MS E . The positive square root of C jj represents the estimated standard deviation of the j th regression coefficient, βj , and it is known as the estimated standard error of βj (abbreviated as se( βj )) and calculated as given in Equation (10).…”

“…To run the algorithm, 'N' is first set as 20, which is the number of nodes/computers connected to the WLAN, 'A' is set to be 7, which is the average packet arrival rate (packets per second), 'R' = 1 (10,6) (10,6), which is the speed of the LAN/channel/bus (in bps), and 'L' is set as 1500, which is the packet length (in bits).…”