The DHCP Snooping and DHCP Alert Method in Securing DHCP Server from DHCP Rogue Attack

Dio Aditya Pradana; Ade Surya Budiman

doi:10.14421/ijid.2021.2287

The DHCP Snooping and DHCP Alert Method in Securing DHCP Server from DHCP Rogue Attack

IJID (International Journal on Informatics for Development) ◽

10.14421/ijid.2021.2287 ◽

2021 ◽

Vol 10 (1) ◽

pp. 38-46

Author(s):

Dio Aditya Pradana ◽

Ade Surya Budiman

Keyword(s):

Monitoring Data ◽

Data Traffic ◽

Network Infrastructure

DHCP Server as part of the network infrastructure in charge of distributing host configurations to all devices has the potential to be controlled. If the DHCP Server is successfully controlled, all network devices connected to the server can potentially be controlled. From the observations made at PT. Rekayasa Engineering found a vulnerability in the DHCP Server that has the potential to experience DHCP Rogue or DHCP Spoofing, where the client will fail to communicate with the authorized DHCP Server, as well as open the door for attackers to enter the network. For this reason, DHCP Snooping and DHCP Alert methods are implemented. DHCP Snooping will ensure that every data traffic has been filtered and directed to the registered interface. Meanwhile, the use of DHCP Alert is required in monitoring data traffic during the Discover, Offer, Request, and Acknowledge (DORA) process. In the tests performed, DHCP Snooping and DHCP Alert managed to anticipate attacks that tried to placed DHCP Rogue on the network infrastructure. DHCP Alert, configured on the proxy router, ensures that the DORA process can only occur between an authorized DHCP server and a client. DHCP Snooping test also shows that communication from clients can only be replied to by Trusted DHCP Server. The existence of DHCP Snooping and DHCP Alert makes the host configuration fully controlled by the authorized DHCP Server.

Download Full-text

Examining the Relationships between Stationary Occupancy and Building Energy Loads in US Educational Buildings–Case Study

Sustainability ◽

10.3390/su12030893 ◽

2020 ◽

Vol 12 (3) ◽

pp. 893 ◽

Cited By ~ 1

Author(s):

Seungtaek Lee ◽

Wai Oswald Chong ◽

Jui-Sheng Chou

Keyword(s):

Building Energy ◽

Data Traffic ◽

Network Infrastructure ◽

Electricity Use ◽

Building Energy Systems ◽

Electricity Load ◽

Logarithmic Relationship ◽

Heating Loads ◽

Building Occupancy

Building energy systems are designed to handle both permanent and temporary occupants. Permanent occupants are considered the base energy load while temporary occupants are considered a temporary or additional load. Temporary occupancy is potentially the most difficult to design as the number of temporary occupants varies more significantly than permanent occupants. This case study was designed to investigate the effect of occupancy on energy loads, i.e. the relationship between occupancy and building energy loads. This study estimated the building occupancy by using existing network infrastructure, such as Wi-Fi and wired Ethernet based on the assumption that the number of Wi-Fi connections and the wired Ethernet traffic were used as a proxy for total and stationary occupancy. The relationships were then examined using correlations and regression analyses. The results showed the following: 1. Stationary occupancy was successfully estimated using the network infrastructure; 2. There was a linear relationship between electricity use and total occupancy (and, thus, the use of network infrastructure); 3. Permanent occupants generated a higher impact on the electricity load than the temporary occupants; 4. There was a logarithmic relationship between electricity use and the Ethernet data traffic (a proxy of permanent occupants); and 5. The statistical and qualitative analyses indicated that there was no significant relationship between occupancy and thermal loads, such as cooling and heating loads.

Download Full-text