What Mitigation Plan Is Best For Thwarting A Dos Attack That Is Creating A Switch Buffer Overflow?

What mitigation plan is best for thwarting a DoS attack that is creating a switch buffer overflow?

• Turn off DTP.
• Turn off STP.
• Enable the port security.
• Put the unused ports in untouchable VLAN. 

Answer: the MAC address table is responsible for the overflow attack the overflow of the buffer and the spoofing in MAC is mitigated by enabling the port security. The STP will not be disabling because it keeps the Layer 2 loops, while the DTP has to be disabled to keep the hopping of VLAN. The unrecognized connectivity is prevented by putting the unused port in the unusable VLAN.

Attack mitigation plan

Attack mitigation plan is the abstract of the security which is formed to give response to any kind of attack as redirect the attack, create the traffic walls and by activating the traffic walls with the help of the natural function i.e. spoofing attack or a DDoS attack, etc.

The nullification of the attack using the mitigation happens on two security levels:

Vulnerability-based attack: the vulnerability attack is used to extract sensitive information from the set of application infrastructure.it is possible with the implementation of the virus as the worms etc. If someone is not ready for the mitigation attack then the information is hacked by the skilled hacker. Large the company greater the risk of the malicious attack that’s why the mitigation plan is the security measure from medium to the large organization as well.

Non-vulnerability-based attack: The purpose of the attack is to misuse the organization’s service with the help of the malicious attack on the traffic which happens to come from the legal user. If some of the problems happen in the IT infrastructure then an attacker tried to overload the resources with the help of the repeated requested till the system is burdened and become ineffective for the legitimate users.

The dangerous non-vulnerability-based attack is the DoS/DDoS in it the system is overloaded with a repeated request for the information and the system is engulfed, slow in the processor crashing together. The DoS tack is in a different format that’s why proper security is important which can find the attack and remove them properly.

The mitigation attack is used by most of the companies and the public sectors to lessen the effect of the attack till the problem is solved. The top strategies which are provided by the NSA and US government are in the following sections:

• Updating and upgrading the software.
• Protect the accounts and the privileges.
• Implement the legitimate software execution policies.
• Practice the recovery plan of the system.
• Manage the system and its configuration.
• The continuous search for the intruder in the network.
• Implement the modern security features for the hardware,
• Segregate Networks Using Application-Aware Defenses.
• Integrate Threat Reputation Service.
• Transition to Multi-Factor Authentication.