Estratégias de segurança interna em redes corporativas: mitigação de ameaças e proteção contra ataques em switches gerenciáveis

Abstract

Computer network security is essential for protecting information and services. Managed switches, in particular, are crucial for ensuring security but are vulnerable to various types of attacks. Although many think that threats come from outside the network, it is important to recognize that they can also arise internally. These threats can range from innocent actions, such as an employee connecting an Ethernet switch to the corporate network to gain more ports, to malicious attacks perpetrated by dissatisfied individuals. This work presents techniques to mitigate threats to switches and reinforce network security. Measures for port protection, prevention of VLAN attacks, protection against DHCP and ARP spoofing, and safeguarding against STP protocol exploits are addressed. Through configurations on the switches, features such as Port Security, DHCP Snooping, Dynamic ARP Inspection, and Root Guard can be implemented. The work demonstrates the practical application of these techniques in simulations using Cisco Packet Tracer software. The analyzed measures significantly mitigate security risks in environments with managed switches, contributing to more resilient corporate networks.