From the course: Certified Information Security Manager (CISM) Cert Prep (2022): 2 Information Security Risk Management

Unlock the full course today

Join today to access over 24,900 courses taught by industry experts.

Layer 2 attacks

Layer 2 attacks

From the course: Certified Information Security Manager (CISM) Cert Prep (2022): 2 Information Security Risk Management

Start my 1-month free trial Buy for my team

Layer 2 attacks

“

- Attacks can also take place at layer two of the OSI model, affecting the data link layer. The address resolution protocol, ARP, works at this layer and performs a function similar to DNS, but deeper down in the network stack. Instead of translating common domain names to IP addresses, ARP translates IP addresses to the hardware addresses used on local area networks. These hardware addresses are known as media access control or MAC addresses. MAC is just an acronym here and has nothing to do with Macintosh computers. Now, much like DNS poisoning, ARP poisoning is a spoofing technique that provides false information in response to ARP requests. Unlike DNS poisoning, ARP poisoning only works on a local network. Normally, a system sends all traffic to a gateway device. When ARP spoofing occurs successfully, the victim system believes that another system is the gateway and sends all traffic to that system. Now, that system…

Contents