COMPARATIVE STUDY OF THE IMPACT OF DOS ATTACKS ON LANS USING VLANS

Abstract

The separation of critical services from noncritical services can occur  on  layer  two  broadcast  domain.  Separation  could  involve  the  isolation  of  broadcast  or  collision  domains  through  Virtual  Local  Area  Networks  VLANs.  This  helps  reduce  the  risk  of  Address  Resolution Protocol ARP storms during heavy scanning events or  denial of service attacks DoS. The major threat on the network is DoS  attacks which use the broadcast storm flooding as TCP syn flood to  engage the servers. This paper demonstrate how VLANs could be  used  to  reduce  the  impact  of  DoS  attacks  on  the  servers.  The  simulation  was  carried  out  using  Cisco  Packet  Tracer  6.0.1.  Two  scenarios were presented, first one showed flooding the server before  VLANs  and  second  scenario  showed  how  VLANs  could  reduce  flooding  the  servers  so  using  VLANs  reduce  the  impact  of  DoS  attacks as mentioned in scenario two.