VLANs Layer 2 Attacks

Architecture and Background

DEF CON 16 - Kevin Figueroa, Marco Figueroa & Anthony Williams: VLANs Layer 2 Attacks: Their Relevance and their Kryptonite Proper network infrastructure configuration is a crucial step in a successful defense in depth strategy for any organization. The fact that the network fabric is susceptible to these attacks years after their initial discovery is alarming and disgusting at the same time. We propose to revisit these attacks using contemporary techniques and tools and also offer equally contemporary solutions to mitigate or foil these malicious networks attacks as the case may be.

Vulnerability Analysis

Networking professionals will be able to walk away from this presentation with solid remedies to these issues with a reinforcement that they actually still exist and are pertinent to a network security strategy that will function now and in the future. Kevin Figueroa is CEO and Information Security Engineer for K & T International Consulting, Inc providing a spectrum of services like security analysis, penetration testing, compliance audit, wireless security assessment, and reverse engineering analysis. Over the last 10 years he has developed security skills which has lead him to various employment opportunities like, CitiGroup, and CNN/money.

Exploitation and Demonstrations

He holds the following certifications: A+, Network +, Security +, CEH Contact him at kfigueroa@kandtcorp.com or Marco Figueroa is the CEO and Senior Security Analyst with MAF Consulting Inc, a New York City information security consulting firm. Marco's expertise includes reverse engineering malware, incident handling, hacker attacks and defenses. He has performed numerous security assessments, and responded to computer attacks for clients in market verticals.

Remediation and Defensive Strategies

Marco holds the following certifications: CEH, GCIH, GREM, Security+, Network+, A+. Contact him at Marco.figueroa@mafcorp.net Anthony L. Williams is the CEO and Information Security Architect for IRON::Guard Security, LLC where he performs penetration testing, vulnerability assessments, audits and incident response. His experience as an information security professional with over 13 years of IT experience include proficiency in regulatory environments including Sarbanes-Oxley and the Health Insurance Portability and Accountability Act with an extensive background in IT audits using ISO/BS 17799 and COBIT. Anthony is a member of the FBI Infragard, Information Systems Security Association and Information Systems Audit and Control Association. For copies of the slides and additional materials please see the DEF CON 16 Archive here: